CVE-2021-20198

HOCH 8.1CVE-2021-20198 · Published 23/02/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-20198 ist eine Schwachstelle (HOCH (CVSS 8.1)) in openshift installer (redhat).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.8%, höher als bei 79.0% aller Schwachstellen.
Abhilfe: auf 0.9.0-master.0.20210125200451-95101da940b0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
openshift installer redhat	`< 0.9.0-master.0.20210125200451-95101da940b0`	`0.9.0-master.0.20210125200451-95101da940b0`

Description

A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated `/exec` requests to execute arbitrary commands within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

References

bugzilla.redhat.com/show_bug.cgi · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free