{"id":"CVE-2024-45496","aliases":["EUVD-2024-2818","GHSA-j8gh-87rx-c7w9","GO-2024-3128"],"status":"published","title":"Openshift-controller-manager: elevated build pods can lead to node compromise in openshift","description":"A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01016,"percentile":0.63719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2024-09-16T23:58:59Z","modified":"2026-08-11T16:17:18Z","fixes":[{"ecosystem":"Go","package":"github.com/openshift/openshift-controller-manager","fixed_in":["0.0.0-alpha.0.0.20240911"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/openshift/openshift-controller-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0-alpha.0.0.20240911"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/openshift/openshift-controller-manager","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-alpha.0.0.20240911"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/openshift/openshift-controller-manager","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]}],"products":[{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:3718","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6122","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6685","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6687","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6689","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6691","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6705","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-45496","tags":["vdb-entry","x_refsource_REDHAT","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308661","tags":["issue-tracking","x_refsource_REDHAT","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45496","tags":["advisory"]},{"url":"https://github.com/openshift/openshift-controller-manager/commit/3af3628103f9ddc3b825e6e5243ec58e85311046","tags":["web","fix"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3128","tags":["web"]},{"url":"https://github.com/advisories/GHSA-j8gh-87rx-c7w9","tags":["advisory"]},{"url":"https://github.com/openshift/openshift-controller-manager","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-45496","title":"Openshift-controller-manager: elevated build pods can lead to node compromise in openshift","description":"A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.","status":"published","published":"2024-09-16T23:58:59.399Z","modified":"2026-08-11T14:55:38.215Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-2818","description":"A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.","status":"published","published":"2024-09-16T23:58:59Z","modified":"2026-08-11T14:55:38Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T18:01:59.926728Z"}],"ghsa":[{"id":"GHSA-j8gh-87rx-c7w9","title":"OpenShift Controller Manager Improper Privilege Management","description":"A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.","status":"published","published":"2024-09-17T00:31:06Z","modified":"2025-01-09T09:31:41Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L","level":"medium"},{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:38:27.067633Z"}],"nvd":[{"id":"CVE-2024-45496","description":"A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.","status":"published","published":"2024-09-17T00:15:52.433Z","modified":"2026-08-11T16:17:18.307Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:10:26.717759Z"}],"osv":[{"id":"GHSA-j8gh-87rx-c7w9","title":"OpenShift Controller Manager Improper Privilege Management","description":"A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An attacker with developer-level access can provide a crafted .gitconfig file containing commands executed during the cloning process, leading to arbitrary command execution on the worker node. An attacker running code in a privileged container could escalate their permissions on the node running the container.","status":"published","published":"2024-09-17T00:31:06Z","modified":"2025-01-09T09:31:40Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"},{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:46:50.336262Z"},{"id":"GO-2024-3128","title":"OpenShift Controller Manager Improper Privilege Management in github.com/openshift/openshift-controller-manager","description":"OpenShift Controller Manager Improper Privilege Management in github.com/openshift/openshift-controller-manager.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: github.com/openshift/openshift-controller-manager before v0.0.0-alpha.0.0.20240911.","status":"published","published":"2024-09-18T15:16:22Z","modified":"2024-09-18T15:42:08.173069Z","updated_at":"2026-11-02T15:47:01.453823Z"}]}}