SB2021040505 - Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.7

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021040505

SB2021040505 - Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.7

Published: April 5, 2021

Security Bulletin ID SB2021040505
Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Improper Validation of Array Index (CVE-ID: CVE-2021-3121)

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to improper validation of index array in plugin/unmarshal/unmarshal.go. A remote attacker can pass specially crafted data to the application and bypass implemented security restrictions, possibly leading to remote code execution.


2) Improper Protection of Alternate Path (CVE-ID: CVE-2021-20206)

The vulnerability allows a remote user to compromise the affected system.

the vulnerability exists due to improper input validation. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows a remote user to execute other existing binaries other than the cni plugins/types, such as 'reboot'.


Remediation

Install update from vendor's website.

References