Log in Start free

Vulnerability · Published Sep 16, 2024 · Assigned by redhat

CVE-2024-7387Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

Critical 9.1

In plain English

A critical-severity security flaw in openshift/builder. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 84% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)2.3%top 16.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Gogithub.com/openshift/builderno fix listedGHSA-qqv8-ph7f-h3f7
Gogithub.com/openshift/builderno fix listedGO-2024-3129

Affected products (as reported)

VendorProductVersions
openshift/builder 0 – before 0b62633adfa2836465202bc851885e078ec888d1
Red Hat Red Hat OpenShift Container Platform 4.12 see references
Red Hat Red Hat OpenShift Container Platform 4.13 see references
Red Hat Red Hat OpenShift Container Platform 4.14 see references
Red Hat Red Hat OpenShift Container Platform 4.15 see references
Red Hat Red Hat OpenShift Container Platform 4.16 see references
Red Hat Red Hat OpenShift Container Platform 4.17 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references

Weakness: CWE-250 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References