CVE-2024-25131
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 19, 2024
CWE ID 20
Summary
CVE-2024-25131: A vulnerability was identified in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. This issue allows a non-privileged user on the cluster to create a maliciously crafted object and grant the most privileged service account to run the associated job. Consequently, a standard developer user can escalate their privileges to a cluster administrator and potentially gain access to the underlying AWS environment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.