Read the docs
TI-2024-04683 Aliases CVE-2024-5042GHSA-2rhx-qhxp-5jpw

Submariner-operator: rbac permissions can allow for the spread of node compromises

Priority LOW 32CWE-250Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
Privilege escalation
Confidentiality · integrity · availability
Low · High · None
Fix status
Partial Red Hat: 2 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-250.

Summary

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00507 43rd percentileScored 2026-11-07
Fix Partial submariner-operator: 0.14.9, 0.15.5, 0.16.7 +2github.com/submariner-io/submariner-operator (Go): 0.16.4, 0.17.2, 0.15.4 +1Red Hat: 2 advisoriesRed Hat: 2 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—submariner-operatorbefore 0.14.9; 0.15.0 to before 0.15.5; 0.16.0 to before 0.16.7; 0.17.0 to before 0.17.2; 0.18.0-m0 to before 0.18.0-rc00.14.9, 0.15.5, 0.16.7, 0.17.2, 0.18.0-rc0Patch availableCNA
Red HatRHODF-4.16-RHEL-9—v4.16.0-19Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774540992Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774540668Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541259Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541345Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541880Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541518Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541420Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541448Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541663Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541469Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774542075Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541617Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541614Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541633Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541625Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541625Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774542179Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541779Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541857Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541919Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774541919Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.20—1774542101Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
—github.com/submariner-io/submariner-operator (Go)0.16.0-m0 to before 0.16.40.16.4Patch availableGHSA-2rhx-qhxp-5jpw
—github.com/submariner-io/submariner-operator (Go)0.17.0-m0 to before 0.17.20.17.2Patch availableGHSA-2rhx-qhxp-5jpw
—github.com/submariner-io/submariner-operator (Go)before 0.15.40.15.4Patch availableGHSA-2rhx-qhxp-5jpw
—github.com/submariner-io/submariner-operator (Go)0.18.0-m0 to before 0.18.0-rc00.18.0-rc0Patch availableGHSA-2rhx-qhxp-5jpw
  • submariner-operator Vendor— Affected before 0.14.9; 0.15.0 to before 0.15.5; 0.16.0 to before 0.16.7; 0.17.0 to before 0.17.2; 0.18.0-m0 to before 0.18.0-rc0 Fixed in 0.14.9, 0.15.5, 0.16.7, 0.17.2, 0.18.0-rc0 Patch available CNA
  • RHODF-4.16-RHEL-9 VendorRed Hat Affected — Fixed in v4.16.0-19 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774540992 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774540668 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541259 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541345 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541880 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541518 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541420 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541448 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541663 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541469 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774542075 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541617 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541614 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541633 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541625 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541625 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774542179 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541779 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541857 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541919 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774541919 Patch available CNA
  • Red Hat Openshift Data Foundation 4.20 VendorRed Hat Affected — Fixed in 1774542101 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • github.com/submariner-io/submariner-operator (Go) Vendor— Affected 0.16.0-m0 to before 0.16.4 Fixed in 0.16.4 Patch available GHSA-2rhx-qhxp-5jpw
  • github.com/submariner-io/submariner-operator (Go) Vendor— Affected 0.17.0-m0 to before 0.17.2 Fixed in 0.17.2 Patch available GHSA-2rhx-qhxp-5jpw
  • github.com/submariner-io/submariner-operator (Go) Vendor— Affected before 0.15.4 Fixed in 0.15.4 Patch available GHSA-2rhx-qhxp-5jpw
  • github.com/submariner-io/submariner-operator (Go) Vendor— Affected 0.18.0-m0 to before 0.18.0-rc0 Fixed in 0.18.0-rc0 Patch available GHSA-2rhx-qhxp-5jpw

CPE names CNA · 3

CPEVersionsRoleVendor
cpe:/a:redhat:openshift_data_foundation:4.16::el94.16—Red Hat
cpe:/a:redhat:openshift_data_foundation:4.20::el94.20—Red Hat
cpe:/a:redhat:acm:22—Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.16::el9 Versions 4.16 — ·Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.20::el9 Versions 4.20 — ·Red Hat
  • cpe:/a:redhat:acm:2 Versions 2 — ·Red Hat

Remediation

  • Fix · CNA submariner-operator Fixed in 0.14.9, 0.15.5, 0.16.7, 0.17.2, 0.18.0-rc0
  • Fix · GHSA-2rhx-qhxp-5jpw github.com/submariner-io/submariner-operator (Go) Fixed in 0.16.4 Advisory →
  • Fix · GHSA-2rhx-qhxp-5jpw github.com/submariner-io/submariner-operator (Go) Fixed in 0.17.2 Advisory →
  • Fix · GHSA-2rhx-qhxp-5jpw github.com/submariner-io/submariner-operator (Go) Fixed in 0.15.4 Advisory →
  • Fix · GHSA-2rhx-qhxp-5jpw github.com/submariner-io/submariner-operator (Go) Fixed in 0.18.0-rc0 Advisory →

Red Hat 2 advisories

  • RHSA-2026:6503 Released 2026-04-02 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2024:4591 Released 2024-07-17 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.0 security, enhancement & bug fix update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-operator-bundle +8

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
RHODF 4.16 for RHEL 9Fixed RHSA-2024:4591
Red Hat Openshift Data Foundation 4.20Fixed RHSA-2026:6503
Not affected: 2 products
  • RHODF 4.16 for RHEL 9
  • Red Hat Openshift Data Foundation 4.20

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-5042
  2. 2026-10-03 Alias added: GHSA-2rhx-qhxp-5jpw
  3. 2026-10-14 Affected versions changed · CNA

References

Advisory 4

Other 9

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences