7180 matches found
CVE-2024-45496 Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...
CVE-2024-45496
CVE-2024-45496 is an OpenShift OpenShift Controller Manager issue describing elevated privileges in the build process. The root cause is the git-clone container running with a privileged security context during build initialization, allowing a crafted .gitconfig to execute commands during cloning...
CVE-2024-45496 Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...
CVE-2024-7387
OpenShift CVE-2024-7387 is a symlink-traversal/path traversal vulnerability in the openshift/builder docker build path. A privileged build container can have its destinationDir override a symlink (e.g., usr_bin -> /usr/bin), enabling overwriting of system binaries like /usr/bin/cp and executio...
CVE-2024-7387 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build containe...
CVE-2024-7387 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build containe...
CVE-2024-7387 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build containe...
RHSA-2024:5405 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update
Bulletin has no description...
RHSA-2024:5406 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update
Bulletin has no description...
RHSA-2024:5411 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update
Bulletin has no description...
RHSA-2024:5410 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 OpenShift Jenkins security update
Bulletin has no description...
RHSA-2024:4848 Red Hat Security Advisory: OpenShift Container Platform 4.13.46 security update
Bulletin has no description...
RHSA-2024:4702 Red Hat Security Advisory: OpenShift Container Platform 4.15.23 packages and security update
Bulletin has no description...
RHSA-2024:0195 Red Hat Security Advisory: OpenShift Container Platform 4.13.29 packages and security update
Bulletin has no description...
RHSA-2024:0308 Red Hat Security Advisory: OpenShift Container Platform 4.11.57 packages and security update
Bulletin has no description...
RHSA-2024:0200 Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update
Bulletin has no description...
RHSA-2023:7606 Red Hat Security Advisory: OpenShift Container Platform 4.13.25 packages and security update
Bulletin has no description...
RHSA-2023:6128 Red Hat Security Advisory: OpenShift Container Platform 4.12.41 packages and security update
Bulletin has no description...