CyberSec.Space Logo
返回 CVE 浏览器

CVE-2018-10843

HIGH
8.5
CVSS Severity Score
EPSS Score0.0360%
EPSS Percentile10.15th
Published2018年7月2日
Last Modified2024年11月21日

Vulnerability Description

source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.

Affected Platforms (CPE)

📦
Redhat

Openshift Container Platform

< 3.7.53
📦
Redhat

Openshift Container Platform

= 3.9
📦
Redhat

Openshift Container Platform

= 3.9.31

References & Advisories

相关漏洞威胁