CVE-2024-7557

Summary

CVE-2024-7557 is a newly discovered vulnerability in OpenShift AI that enables authentication bypass and privilege escalation. Despite the UI offering model protection through authentication, credentials from one model can grant access to other models and related APIs within the same namespace. Exposed ServiceAccount tokens, visible in the UI, can be exploited using oc --token={token}, resulting in unauthorized access to additional resources and elevated privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.