VDB
CVE-2024-5042
CVE-2024-5042
PUBLISHED
CVSS 6.599999904632568 MEDIUM
Submariner Operator sets unnecessary RBAC permissions
EPSS 0.51% · 41.1th percentile
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N
EPSS Score
0.51%
41.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| 0, 0, 0.15.0 | ||
| github.com | submariner-io/submariner-operator | 0.17.0-m0, 0.18.0-m0, 0 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541633 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | RHODF-4.16-RHEL-9 | v4.16.0-19, v4.16.0-19 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541617 |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541857 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541663 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774540668 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774542101 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541345 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541779 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541919 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541919 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541420 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774541469 |
| Red Hat | Red Hat Openshift Data Foundation 4.2 | 1774542075 |
…and 14 more
Timeline
- May 17, 2024 CVE Published
- May 18, 2024 EPSS Score
- Jun 12, 2024 EPSS Score
- Jul 7, 2024 EPSS Score
- Jul 31, 2024 EPSS Score
- Aug 24, 2024 EPSS Score
- Sep 18, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 12, 2024 EPSS Score
- Nov 5, 2024 EPSS Score
- Nov 30, 2024 EPSS Score
- Dec 25, 2024 EPSS Score
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-5042 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2280921 url
- https://github.com/advisories/GHSA-2rhx-qhxp-5jpw advisory
- https://github.com/submariner-io/submariner-operator package
- https://github.com/submariner-io/submariner-operator/pull/3046 fix
- https://github.com/submariner-io/submariner-operator/pull/3049 fix
- https://github.com/submariner-io/submariner-operator/commit/b27a04c4270e53cbff6ff8ac6245db10c204bcab fix
- https://access.redhat.com/errata/RHSA-2024:4591 advisory
- https://access.redhat.com/errata/RHSA-2026:6503 advisory
- https://access.redhat.com/security/cve/CVE-2024-5042 advisory
- https://github.com/submariner-io/submariner-operator/issues/3041 discussion
- https://github.com/submariner-io/submariner-operator/pull/3040 fix
- https://github.com/submariner-io/submariner-operator/pull/3045 fix