CVE-2015-5222: High severity red hat openshift vulnerability
Cesar Wong of Red Hat reports:
Exec operations should be forbidden to privileged pods such as builder pods because they have privileged access to nodes. Currently, you can exec into any builder pod, getting privileged root access to the node it's running on.
Other sources
Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute arbitrary shell commands with root permissions on arbitrary build pods via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5222?
CVE-2015-5222 is considered a critical vulnerability due to its potential for remote authenticated users to execute arbitrary commands with root permissions.
How do I fix CVE-2015-5222?
To fix CVE-2015-5222, it is recommended to upgrade Red Hat OpenShift Enterprise to a version that addresses this vulnerability.
Who is affected by CVE-2015-5222?
Red Hat OpenShift Enterprise 3.0.0.0 users with build permissions are affected by CVE-2015-5222.
What can be exploited in CVE-2015-5222?
CVE-2015-5222 can be exploited by remote authenticated users to execute arbitrary shell commands on build pods.
When was CVE-2015-5222 reported?
CVE-2015-5222 was reported by Cesar Wong of Red Hat.