CVE-2024-7079: Openshift-console: unauthenticated installation of helm charts
A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser() middleware function. Contrary to its name, this middleware function does not verify the validity of the user's credentials. As a result, unauthenticated users can access this endpoint.
Other sources
The /api/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI (remote http/https or local). Access to this endpoint is gated by the authHandlerWithUser() middleware function, contrary to its name, this middleware function does not check if the user's credentials are valid. This endpoint can therefore be accessed by unauthenticated users.
The impact of this vulnerability is as follows: An unauthenticated user can cause the console to query arbitrary HTTP/HTTPS URLs. An unauthenticated user can, by crafting a specific Helm Chart, leak all kubernetes resources accessible by the openshift-console:console service account. A user with an account – regardless of its privileges – can cause the OpenShift Console to not load for all users. In such an attack, anyone trying to access the Console's web interface will only see a white page after authentication.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7079?
CVE-2024-7079 has been classified with a high severity rating due to its impact on the OpenShift console's Helm chart verification endpoint.
How do I fix CVE-2024-7079?
To mitigate CVE-2024-7079, it is recommended to update to the latest patched versions of Red Hat OpenShift Container Platform 3.11 and 4.0.
Which versions of OpenShift Container Platform are affected by CVE-2024-7079?
CVE-2024-7079 affects Red Hat OpenShift Container Platform versions 3.11 and 4.0.
What is the impact of exploiting CVE-2024-7079?
Exploitation of CVE-2024-7079 may allow unauthorized access to the Helm chart verification process, potentially compromising the integrity of the deployment.
Is there a known workaround for CVE-2024-7079?
Currently, there are no documented workarounds for CVE-2024-7079; the recommended approach is to apply the security updates.