Lucene search
K

It was found in OpenShift before version 4.8 that the generated certificate for the in-cluster Service CA incorrectly included additional certificates. The Service CA is automatically mounted into all pods allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.

🗓️ 15 Apr 2024 07:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 1 Views

OpenShift pre-4.8 Service Certificate Authority had extra certificates, enabling attackers to masquerade as trusted in-cluster services.

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by an OpenShift security vulnerability (CVE-2021-3636)
17 Nov 202115:55
ibm
CNNVD
Red Hat OpenShift 授权问题漏洞
14 Jul 202100:00
cnnvd
CNVD
Red Hat OpenShift has unexplained holes
15 Jul 202100:00
cnvd
CVE
CVE-2021-3636
30 Jul 202119:27
cve
Cvelist
CVE-2021-3636
30 Jul 202119:27
cvelist
EUVD
EUVD-2021-26937
7 Oct 202500:30
euvd
NVD
CVE-2021-3636
30 Jul 202120:15
nvd
OSV
CVE-2021-3636
30 Jul 202120:15
osv
OSV
RHSA-2021:2437 Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update
18 Sep 202404:18
osv
Prion
Code injection
30 Jul 202120:15
prion
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Feb 2026 10:23Current
7High risk
Vulners AI Score7
CVSS 24.1
CVSS 3.14.6
EPSS0.00031
1