Lucene search

K
osvGoogleOSV:GO-2024-3128
HistorySep 18, 2024 - 3:16 p.m.

OpenShift Controller Manager Improper Privilege Management in github.com/openshift/openshift-controller-manager

2024-09-1815:16:22
Google
osv.dev
openshift
controller manager
privilege management
vulnerability

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

AI Score

6.7

Confidence

High

EPSS

0

Percentile

16.4%

OpenShift Controller Manager Improper Privilege Management in github.com/openshift/openshift-controller-manager.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/openshift/openshift-controller-manager before v0.0.0-alpha.0.0.20240911.

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

AI Score

6.7

Confidence

High

EPSS

0

Percentile

16.4%