Read the docs
TI-2024-30536 Aliases CVE-2024-45496GHSA-j8gh-87rx-c7w9

Openshift-controller-manager: elevated build pods can lead to node compromise in openshift

Priority MEDIUM 45CWE-269Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-269.

Summary

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01016 63rd percentileScored 2026-11-07
Fix Fixed github.com/openshift/openshift-controller-manager (Go): 0.0.0-alpha.0.0.20240911Red Hat: 7 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—openshift-controller-manager4.12.0 – 4.18.0—No fix listedCNA
Red HatRed Hat OpenShift Container Platform 4.12—v4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.13—v4.13.0-202409130707.p1.gb75d499.assembly.stream.el8Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.14—v4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.15—v4.15.0-202409131835.p1.gbe9d673.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.16—v4.16.0-202409130937.p1.g5dcfc99.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.17—v4.17.0-202409182235.p0.g7682a61.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gc395190.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g987615c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g3385690.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502101302.p0.g763313c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041632.p0.g6182930.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g838d248.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g838d248.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g838d248.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501281202.p0.g336d783.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g914783c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502010001.p0.g061909a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ge905646.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g526498a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ga371641.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502040032.p0.gc864494.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd352778.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g182471a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g182471a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g182471a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g700802f.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g314589c.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—418.94.202502100215-0Patch availableCNA
—github.com/openshift/openshift-controller-manager (Go)before 0.0.0-alpha.0.0.202409110.0.0-alpha.0.0.20240911Patch availableGHSA-j8gh-87rx-c7w9
  • openshift-controller-manager Vendor— Affected 4.12.0 – 4.18.0 Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in v4.12.0-202409131137.p1.g0b1971a.assembly.stream.el8 Patch available CNA
  • Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in v4.13.0-202409130707.p1.gb75d499.assembly.stream.el8 Patch available CNA
  • Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in v4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8 Patch available CNA
  • Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131835.p1.gbe9d673.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in v4.16.0-202409130937.p1.g5dcfc99.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202409182235.p0.g7682a61.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202502100215-0 Patch available CNA
  • github.com/openshift/openshift-controller-manager (Go) Vendor— Affected before 0.0.0-alpha.0.0.20240911 Fixed in 0.0.0-alpha.0.0.20240911 Patch available GHSA-j8gh-87rx-c7w9

CPE names CNA · 8

CPEVersionsRoleVendor
cpe:/a:redhat:openshift:4.12::el84.12—Red Hat
cpe:/a:redhat:openshift:4.13::el84.13—Red Hat
cpe:/a:redhat:openshift:4.14::el84.14—Red Hat
cpe:/a:redhat:openshift:4.15::el84.15—Red Hat
cpe:/a:redhat:openshift:4.15::el94.15—Red Hat
cpe:/a:redhat:openshift:4.16::el94.16—Red Hat
cpe:/a:redhat:openshift:4.17::el94.17—Red Hat
cpe:/a:redhat:openshift:4.18::el94.18—Red Hat
  • cpe:/a:redhat:openshift:4.12::el8 Versions 4.12 — ·Red Hat
  • cpe:/a:redhat:openshift:4.13::el8 Versions 4.13 — ·Red Hat
  • cpe:/a:redhat:openshift:4.14::el8 Versions 4.14 — ·Red Hat
  • cpe:/a:redhat:openshift:4.15::el8 Versions 4.15 — ·Red Hat
  • cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
  • cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
  • cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
  • cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat

Remediation

  • Fix · GHSA-j8gh-87rx-c7w9 github.com/openshift/openshift-controller-manager (Go) Fixed in 0.0.0-alpha.0.0.20240911 Advisory →

Red Hat 7 advisories

  • RHSA-2024:6122 Released 2025-02-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
  • RHSA-2024:3718 Released 2024-10-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:6705 Released 2024-09-19 · Red Hat rating Important
    OpenShift Container Platform 4.12.66 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8
Show 4 more Red Hat advisories
  • RHSA-2024:6685 Released 2024-09-19 · Red Hat rating Important
    OpenShift Container Platform 4.15.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel9
  • RHSA-2024:6687 Released 2024-09-19 · Red Hat rating Important
    OpenShift Container Platform 4.16.13 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-docker-builder-rhel9, openshift4/ose-openshift-controller-manager-rhel9
  • RHSA-2024:6689 Released 2024-09-19 · Red Hat rating Important
    OpenShift Container Platform 4.14.37 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8
  • RHSA-2024:6691 Released 2024-09-19 · Red Hat rating Important
    OpenShift Container Platform 4.13.50 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6685

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2024-06847 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyPriority HIGH 74
  • Advisory ·

    Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6687

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2024-06847 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyPriority HIGH 74
Show 3 more groups
  • Advisory ·

    Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6689

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2024-06847 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyPriority HIGH 74
  • Advisory ·

    Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6691

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2024-06847 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyPriority HIGH 74
  • Advisory ·

    Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6705

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2024-06847 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyPriority HIGH 74

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:6705
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:6691
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:6689
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2024:6685
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:6687
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2024:3718
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2024:6122
Not affected: 6 products
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-45496
  2. 2026-10-03 Alias added: GHSA-j8gh-87rx-c7w9

References

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources