VDB

BDU%3A2024-05068

BDU%3A2024-05068 PUBLISHED CVSS 6.599999904632568 MEDIUM

Уязвимость программного обеспечения взаимодействия модулей и служб в кластерах Kubernetes Submariner Operator, связанная с ошибками при управлении привилегиями, позволяющая нарушителю запустить на узле произвольный контейнер

Risk Scores

CVSS 3.1
6.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

Affected Products

VendorProductVersions
Red HatRed Hat Openshift Data Foundation 4.21774541857
Red HatRed Hat Openshift Data Foundation 4.21774541919
Red HatRed Hat Openshift Data Foundation 4.21774541614
Red HatRed Hat Openshift Data Foundation 4.21774541345
Red HatRed Hat Openshift Data Foundation 4.21774541633
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Openshift Data Foundation 4.21774541625
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Openshift Data Foundation 4.21774541469
Red HatRed Hat Openshift Data Foundation 4.21774541663
Red HatRed Hat Openshift Data Foundation 4.21774541880
Red HatRed Hat Openshift Data Foundation 4.21774542075
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red Hat Inc., Submariner IORed Hat Openshift Data Foundation, Red Hat Advanced Cluster Management for Kubernetes, Submariner operator
Red HatRed Hat Openshift Data Foundation 4.21774541259
Red HatRed Hat Openshift Data Foundation 4.21774540668
Red HatRed Hat Openshift Data Foundation 4.21774541518
Red HatRed Hat Openshift Data Foundation 4.21774541420
Red HatRed Hat Openshift Data Foundation 4.21774542179
Red HatRed Hat Openshift Data Foundation 4.21774542101

…and 11 more

Timeline

  • May 17, 2024 CVE Published
  • Jul 5, 2024 CVE Updated
  • Jan 20, 2025 PoC Published
  • Apr 7, 2025 PoC Published
  • Aug 31, 2026 Distribution Patch
  • Aug 31, 2026 Security Advisory
  • Aug 31, 2026 Distribution Patch
  • Aug 31, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›