CVE-2024-25133

A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-controllers pod...

CVE-2024-25133

creationtimestamp| type| source ---|---|--- 2024-12-31 14:28:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113747904621900088 2024-12-31 15:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemdngv5ve25 2024-12-31 17:03:37+00:00| seen|...

CVE-2024-25133

CVE-2024-25133 affects OpenShift Dedicated’s Hive ClusterDeployments resource. Under certain conditions, a developer account on a Hive-enabled cluster could trigger arbitrary commands execution on the hive/hive-controllers pod, enabling privilege escalation to cluster-admin. The referenced report...

CVE-2024-25133 Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation

A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-controllers pod...

CVE-2024-25133 Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation

A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-controllers pod...