CVE-2024-9779highCWE-266

CVE-2024-9779: falha de alta gravidade em open-cluster-management-io

Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Advanced Cluster Management for Kubernetes+ Monitorar open-cluster-management-io

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.4%
A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager's token and steal any service account token by creating and mounting the target service account to control the whole cluster.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
Produtos afetados
open-cluster-management-ioRed Hat · Red Hat Advanced Cluster Management for Kubernetes 2
CVEs relacionadas — open-cluster-management-io

No mesmo produto, das mais perigosas para as menos.

CVE-2026-66786CRITICALSubmariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnetsEPSS 1.4%CVE-2024-3727HIGHContainers/image: digest type does not guarantee valid typeEPSS 1.3%CVE-2024-11831MEDIUMNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptEPSS 1.1%CVE-2026-16242CRITICALHypershift: konnectivity proxy-server accepts agent connections without validating client certificatesEPSS 0.9%CVE-2024-1139HIGHCluster-monitoring-operator: credentials leakEPSS 0.9%CVE-2024-0874MEDIUMCoredns: cd bit response is cached and served laterEPSS 0.8%