A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.
{
"cna_assigner": "redhat",
"cwe_ids": [
"CWE-250"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/5xxx/CVE-2024-5042.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "v4.16.0-19"
},
{
"fixed": "1774540992"
},
{
"fixed": "1774540668"
},
{
"fixed": "1774541259"
},
{
"fixed": "1774541345"
},
{
"fixed": "1774541880"
},
{
"fixed": "1774541518"
},
{
"fixed": "1774541420"
},
{
"fixed": "1774541448"
},
{
"fixed": "1774541663"
},
{
"fixed": "1774541469"
},
{
"fixed": "1774542075"
},
{
"fixed": "1774541617"
},
{
"fixed": "1774541614"
},
{
"fixed": "1774541633"
},
{
"fixed": "1774541625"
},
{
"fixed": "1774541625"
},
{
"fixed": "1774542179"
},
{
"fixed": "1774541779"
},
{
"fixed": "1774541857"
},
{
"fixed": "1774541919"
},
{
"fixed": "1774541919"
},
{
"fixed": "1774542101"
}
],
"source": "AFFECTED_FIELD",
"strategy": "InverseAffectedRanges"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "0.14.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "0.15.0"
},
{
"fixed": "0.15.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "0.16.0"
},
{
"fixed": "0.16.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "0.17.0"
},
{
"fixed": "0.17.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "0.18.0-m0"
},
{
"fixed": "0.18.0-rc0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}