Vulnerability · Published Aug 8, 2024 · Assigned by redhat
CVE-2024-7557Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
High 8.8
In plain English
A high-severity security flaw in odh-dashboard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Official description
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.
Affected products (as reported)
Weakness: CWE-305 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- RHBA-2024:8240 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-7557 vdb-entry, x_refsource_REDHAT
- RHBZ#2303094 issue-tracking, x_refsource_REDHAT
- https://github.com/opendatahub-io/odh-dashboard/pull/3198