CVE-2024-45497

Summary

CVE-2024-45497 is a vulnerability affecting the OpenShift build process. The issue lies in the use of a hostPath volume mount in the docker-build container, which maps the sensitive /var/lib/kubelet/config.json file from the node into the build pod. This file contains critical credentials required for accessing private image repositories. Unfortunately, the mount is not set to read-only, enabling attackers to overwrite the file. By manipulating the config.json file, an adversary can induce a denial-of-service by preventing the node from fetching new images and potentially leak sensitive secrets, endangering the availability of dependent services and confidential information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.