Product
Excessive RBAC Permissions in Red Hat OpenShift insights-operator
3 TTPs 1 CVEA misconfiguration in the OpenShift insights-operator ClusterRole grants the 'gather' service account cluster-wide read access to secrets, enabling privilege escalation for attackers who can spawn pods with that identity.
Remote Code Execution Vulnerability in Red Hat OpenShift Container Platform
1 CVEA critical remote code execution vulnerability, tracked as CVE-2024-8979, allows unauthenticated remote attackers to execute arbitrary code within the Red Hat OpenShift Container Platform environment.
Security Bypass Vulnerability in Red Hat OpenShift oauth-proxy
1 CVEA vulnerability in the Red Hat OpenShift oauth-proxy component, identified as CVE-2024-5254, allows a remote authenticated attacker to bypass security controls and manipulate data.
Red Hat OpenShift Container Platform Vulnerability Allows Security Bypass
1 TTPA vulnerability in the Red Hat OpenShift Container Platform allows a local attacker to bypass security controls, potentially leading to unauthorized access or further compromise of the platform.
Red Hat OpenShift Container Platform Security Bypass Vulnerability
2 rules 1 TTPA remote, authenticated attacker can exploit a vulnerability in Red Hat OpenShift Container Platform to bypass security measures.