openshift github.com/openshift/openshift-controller-manager vulnerabilities

Latest openshift github.com/openshift/openshift-controller-manager CVEs

Newest publication first

1. CVE-2024-45496 Openshift-controller-manager: elevated build pods can lead to node compromise in openshift

   Published 2024-09-16

   Critical·CVSS 9.9 EPSS 1.0%

   A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.