CVE-2024-25133
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 31, 2024
Updated: Feb 6, 2025
CWE ID 284
Summary
CVE-2024-25133 is a newly discovered vulnerability affecting the Hive ClusterDeployments resource in OpenShift Dedicated. This issue permits a developer account on a Hive-enabled cluster to elevate privileges and gain cluster-admin access. Under specific conditions, an attacker can execute arbitrary commands on the hive/hive-controllers pod, potentially leading to unauthorized cluster administration. This vulnerability poses a significant risk to OpenShift Dedicated deployments and requires immediate attention and patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.