An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShift cluster. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects versions before openshift4/ose-machine-config-operator v4.7.0-202105111858.p0.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1914714 | Issue Tracking Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2021-06-02T13:22:12
Updated: 2021-06-02T13:22:12
Reserved: 2020-12-17T00:00:00
Link: CVE-2020-35514
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-06-02T14:15:09.577
Modified: 2021-06-11T16:42:09.027
Link: CVE-2020-35514
JSON object: View
Redhat Information
No data.
CWE