CVE-2021-3948: Medium severity konveyor mig-controller vulnerability
An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.
Other sources
The Migration Toolkit for Containers (MTC) enables you to migrate stateful application workloads between OpenShift Container Platform 4 clusters at the granularity of a namespace. By default the migration process should be available only for users with cluster-admin privileges on all clusters (source and target). The controller watches ALL namespaces, rather than strictly the openshift-migration namespace, what may lead to not-authorized usage of the Migration Toolkit for Containers (MTC).
Users with permissions to create MigPlans and MigMigrations CRDs (namespace admins) may create them in their own namespace. That would provide a way to register their own (potentially crafted) cluster (source) with a MigCluster in their namespace on the target cluster and migrate malicious workload to the target cluster. Potentially that may lead to the exposure of sensitive information or even may provide a way to permission escalation.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-3948?
CVE-2021-3948 is an incorrect default permissions vulnerability found in the mig-controller.
What is the impact of CVE-2021-3948?
CVE-2021-3948 can allow an attacker to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.
Which software is affected by CVE-2021-3948?
Software affected by CVE-2021-3948 includes Konveyor Mig-controller versions up to 1.5.2, Konveyor Mig-controller versions between 1.6.0 and 1.6.3, and Redhat Migration Toolkit version 1.0.
How severe is CVE-2021-3948?
CVE-2021-3948 has a severity score of 6.3, which is considered medium.
How can CVE-2021-3948 be fixed?
To fix CVE-2021-3948, it is recommended to update to the latest version of the affected software.