Vulnetix
Try Vulnetix Request Demo
CVE-2021-20198 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated `/exec` requests to execute arbitrary commands within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

EPSS 0.56% · 68.0th percentile

Risk Scores

CVSS v3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.56%
68.0th percentile

Affected Products

VendorProductVersions
n/aopenshift/installeropenshift/installer v0.9.0-master.0.20210125200451-95101da940b0
redhatopenshift_installer0

Timeline

References

Open in Interactive Console →