Vulnerability · Published Feb 23, 2021 · Assigned by redhat

CVE-2021-20182

High 8.8

In plain English

A high-severity security flaw in openshift. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)1.1%top 33.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to this build container, they can potentially utilize the raw devices of the underlying node, such as the network and storage devices, to at least escalate their privileges to that of the cluster admin. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected products (as reported)

Vendor	Product	Versions
n/a	openshift	github.com/openshift/builder v0.0.0-20210118193943-6d10f5202a76

Weakness: CWE-552

References

https://bugzilla.redhat.com/show_bug.cgi?id=1915110 x_refsource_MISC