Chi Zhang

أثناء عملية تمهيد ABI، يقوم `approve-csr.service` في عقدة التمهيد بالموافقة على كل طلب توقيع شهادة (CSR) وتوقيعه دون التحقق من الهوية. يمكن للمهاجم الموجود على شبكة التثبيت استرداد ملف Ignition غير المصرح به عبر المنفذين 22623 أو 22624، واستخراج kubeconfig محدود، وتقديم طلب CSR لـ `CN=system:admin`. يتيح ذلك للمهاجم الحصول على شهادة موقعة واكتساب صلاحيات وصول كاملة كمسؤول للنظام (cluster-admin). هذه الثغرة قابلة للاستغلال فقط خلال نافذة التمهيد الضيقة.

The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access control. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.

The issue is related to an elevation of privilege vulnerability in the Android media framework, which can be exploited by a remote attacker to gain elevated privileges. This vulnerability is associated with inadequate access control in the Android operating system.

The issue is related to a remote code execution vulnerability in the Android media framework. It is also associated with insufficient access control in the Android operating system, which can allow a remote attacker to execute arbitrary code.

The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control in the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control, which can be exploited by a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.

The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.

An elevation of privilege issue in the NVIDIA libomx library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.

The issue is related to an elevation of privilege vulnerability in the NVIDIA libomx library, which is due to inadequate access control. This vulnerability can be exploited by a remote attacker to execute arbitrary code within the context of a privileged process, allowing access to elevated capabilities that are not normally accessible to third-party applications. The issue is rated as high.

The issue is related to insufficient access control in Qualcomm media codecs for the Android operating system. It allows a remote attacker to execute arbitrary code. This problem can be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.

The issue is related to an elevation of privilege vulnerability in Qualcomm media codecs, which could allow a local malicious application to execute arbitrary code within the context of a privileged process. This could be used to gain local access to elevated capabilities. The vulnerability is also described as being related to insufficient access control in Qualcomm media codecs, potentially allowing a remote attacker to execute arbitrary code.