PT-2024-20772

CVE-2024-25133

Published

2024-12-31

Updated

2025-01-10

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenShift Dedicated (affected versions not specified)

Description A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-controllers pod.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Robb Gatica

Thibault Guittet

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers