Read the docs
TI-2021-03496 Aliases CVE-2021-20198

Missing authentication in openshift/installer

Priority LOW 39CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-306.

Summary

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated `/exec` requests to execute arbitrary commands within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Why it matters now

EPSS 0.01833 79th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—openshift/installeropenshift/installer v0.9.0-master.0.20210125200451-95101da940b0—No fix listedCNA
  • openshift/installer Vendor— Affected openshift/installer v0.9.0-master.0.20210125200451-95101da940b0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:redhat:openshift_installer:*:*:*:*:*:*:*:*before 0.9.0-master.0.20210125200451-95101da940b0VulnerableRed Hat
  • cpe:2.3:a:redhat:openshift_installer:*:*:*:*:*:*:*:* Versions before 0.9.0-master.0.20210125200451-95101da940b0 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2021:0313 Released 2021-02-09 · Red Hat rating Important
    OpenShift Container Platform 4.5.31 bug fix and security update
    • Red Hat OpenShift Container Platform 4.5 openshift4/ose-installer
  • RHSA-2021:0308 Released 2021-02-08 · Red Hat rating Important
    OpenShift Container Platform 4.6.16 security and bug fix update
    • Red Hat OpenShift Container Platform 4.6 openshift4/ose-docker-builder, openshift4/ose-etcd, openshift4/ose-installer

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 4.5Fixed RHSA-2021:0313
Red Hat OpenShift Container Platform 4.6Fixed RHSA-2021:0308
Not affected: 3 products
  • Red Hat OpenShift Container Platform 3.11
  • Red Hat OpenShift Container Platform 4.5
  • Red Hat OpenShift Container Platform 4.6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20198

References

Patch 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences