CVE Listesine Dön
CVE-2024-7387Kavram kanıtı (PoC) yayınlanmış · CISA

Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

CVSS Skor

9.1

EPSS İhtimal

%2.3

Risk Skoru

0.2

Yayın

2 yıl önce

Yama durumu henüz doğrulanamadı

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2024-7387 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2024-7387 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1redhatopenshift/builder İncele
2Red HatRed Hat OpenShift Container Platform 4.12 İncele
3Red HatRed Hat OpenShift Container Platform 4.13 İncele
4Red HatRed Hat OpenShift Container Platform 4.14 İncele
5Red HatRed Hat OpenShift Container Platform 4.15 İncele
6Red HatRed Hat OpenShift Container Platform 4.16 İncele
7Red HatRed Hat OpenShift Container Platform 4.17 İncele
8Red HatRed Hat OpenShift Container Platform 4.18 İncele
9Red HatRed Hat OpenShift Container Platform 4.18 İncele
10Red HatRed Hat OpenShift Container Platform 4.18 İncele
11Red HatRed Hat OpenShift Container Platform 4.18 İncele
12Red HatRed Hat OpenShift Container Platform 4.18 İncele
13Red HatRed Hat OpenShift Container Platform 4.18 İncele
14Red HatRed Hat OpenShift Container Platform 4.18 İncele
15Red HatRed Hat OpenShift Container Platform 4.18 İncele
16Red HatRed Hat OpenShift Container Platform 4.18 İncele
17Red HatRed Hat OpenShift Container Platform 4.18 İncele
18Red HatRed Hat OpenShift Container Platform 4.18 İncele
19Red HatRed Hat OpenShift Container Platform 4.18 İncele
20Red HatRed Hat OpenShift Container Platform 4.18 İncele
21Red HatRed Hat OpenShift Container Platform 4.18 İncele
22Red HatRed Hat OpenShift Container Platform 4.18 İncele
23Red HatRed Hat OpenShift Container Platform 4.18 İncele
24Red HatRed Hat OpenShift Container Platform 4.18 İncele
25Red HatRed Hat OpenShift Container Platform 4.18 İncele
26Red HatRed Hat OpenShift Container Platform 4.18 İncele
27Red HatRed Hat OpenShift Container Platform 4.18 İncele
28Red HatRed Hat OpenShift Container Platform 4.18 İncele
29Red HatRed Hat OpenShift Container Platform 4.18 İncele
30Red HatRed Hat OpenShift Container Platform 4.18 İncele
31Red HatRed Hat OpenShift Container Platform 4.18 İncele
32Red HatRed Hat OpenShift Container Platform 4.18 İncele
33Red HatRed Hat OpenShift Container Platform 4.18 İncele
34Red HatRed Hat OpenShift Container Platform 4.18 İncele
35Red HatRed Hat OpenShift Container Platform 4.18 İncele
36Red HatRed Hat OpenShift Container Platform 4.18 İncele
37Red HatRed Hat OpenShift Container Platform 4.18 İncele
38Red HatRed Hat OpenShift Container Platform 4.18 İncele
39Red HatRed Hat OpenShift Container Platform 4.18 İncele
40Red HatRed Hat OpenShift Container Platform 4.18 İncele
41Red HatRed Hat OpenShift Container Platform 4.18 İncele
42Red HatRed Hat OpenShift Container Platform 4.18 İncele
43Red HatRed Hat OpenShift Container Platform 4.18 İncele
44Red HatRed Hat OpenShift Container Platform 4.18 İncele
45Red HatRed Hat OpenShift Container Platform 4.18 İncele
46Red HatRed Hat OpenShift Container Platform 4.18 İncele
47Red HatRed Hat OpenShift Container Platform 4.18 İncele
48Red HatRed Hat OpenShift Container Platform 4.18 İncele
49Red HatRed Hat OpenShift Container Platform 4.18 İncele
50Red HatRed Hat OpenShift Container Platform 4.18 İncele
51Red HatRed Hat OpenShift Container Platform 4.18 İncele
52Red HatRed Hat OpenShift Container Platform 4.18 İncele
53Red HatRed Hat OpenShift Container Platform 4.18 İncele
54Red HatRed Hat OpenShift Container Platform 4.18 İncele
55Red HatRed Hat OpenShift Container Platform 4.18 İncele
56Red HatRed Hat OpenShift Container Platform 4.18 İncele
57Red HatRed Hat OpenShift Container Platform 4.18 İncele
58Red HatRed Hat OpenShift Container Platform 4.18 İncele
59Red HatRed Hat OpenShift Container Platform 4.18 İncele
60Red HatRed Hat OpenShift Container Platform 4.18 İncele
61Red HatRed Hat OpenShift Container Platform 4.18 İncele
62Red HatRed Hat OpenShift Container Platform 4.18 İncele
63Red HatRed Hat OpenShift Container Platform 4.18 İncele
64Red HatRed Hat OpenShift Container Platform 4.18 İncele
65Red HatRed Hat OpenShift Container Platform 4.18 İncele
66Red HatRed Hat OpenShift Container Platform 4.18 İncele
67Red HatRed Hat OpenShift Container Platform 4.18 İncele
68Red HatRed Hat OpenShift Container Platform 4.18 İncele
69Red HatRed Hat OpenShift Container Platform 4.18 İncele
70Red HatRed Hat OpenShift Container Platform 4.18 İncele
71Red HatRed Hat OpenShift Container Platform 4.18 İncele
72Red HatRed Hat OpenShift Container Platform 4.18 İncele
73Red HatRed Hat OpenShift Container Platform 4.18 İncele
74Red HatRed Hat OpenShift Container Platform 4.18 İncele
75Red HatRed Hat OpenShift Container Platform 4.18 İncele
76Red HatRed Hat OpenShift Container Platform 4.18 İncele
77Red HatRed Hat OpenShift Container Platform 4.18 İncele
78Red HatRed Hat OpenShift Container Platform 4.18 İncele
79Red HatRed Hat OpenShift Container Platform 4.18 İncele
80Red HatRed Hat OpenShift Container Platform 4.18 İncele
81Red HatRed Hat OpenShift Container Platform 4.18 İncele
82Red HatRed Hat OpenShift Container Platform 4.18 İncele
83Red HatRed Hat OpenShift Container Platform 4.18 İncele
84Red HatRed Hat OpenShift Container Platform 4.18 İncele
85Red HatRed Hat OpenShift Container Platform 4.18 İncele
86Red HatRed Hat OpenShift Container Platform 4.18 İncele
87Red HatRed Hat OpenShift Container Platform 4.18 İncele
88Red HatRed Hat OpenShift Container Platform 4.18 İncele
89Red HatRed Hat OpenShift Container Platform 4.18 İncele
90Red HatRed Hat OpenShift Container Platform 4.18 İncele
91Red HatRed Hat OpenShift Container Platform 4.18 İncele
92Red HatRed Hat OpenShift Container Platform 4.18 İncele
93Red HatRed Hat OpenShift Container Platform 4.18 İncele
94Red HatRed Hat OpenShift Container Platform 4.18 İncele
95Red HatRed Hat OpenShift Container Platform 4.18 İncele
96Red HatRed Hat OpenShift Container Platform 4.18 İncele
97Red HatRed Hat OpenShift Container Platform 4.18 İncele
98Red HatRed Hat OpenShift Container Platform 4.18 İncele
99Red HatRed Hat OpenShift Container Platform 4.18 İncele
100Red HatRed Hat OpenShift Container Platform 4.18 İncele
101Red HatRed Hat OpenShift Container Platform 4.18 İncele
102Red HatRed Hat OpenShift Container Platform 4.18 İncele
103Red HatRed Hat OpenShift Container Platform 4.18 İncele
104Red HatRed Hat OpenShift Container Platform 4.18 İncele
105Red HatRed Hat OpenShift Container Platform 4.18 İncele
106Red HatRed Hat OpenShift Container Platform 4.18 İncele
107Red HatRed Hat OpenShift Container Platform 4.18 İncele
108Red HatRed Hat OpenShift Container Platform 4.18 İncele
109Red HatRed Hat OpenShift Container Platform 4.18 İncele
110Red HatRed Hat OpenShift Container Platform 4.18 İncele
111Red HatRed Hat OpenShift Container Platform 4.18 İncele
112Red HatRed Hat OpenShift Container Platform 4.18 İncele
113Red HatRed Hat OpenShift Container Platform 4.18 İncele
114Red HatRed Hat OpenShift Container Platform 4.18 İncele
115Red HatRed Hat OpenShift Container Platform 4.18 İncele
116Red HatRed Hat OpenShift Container Platform 4.18 İncele
117Red HatRed Hat OpenShift Container Platform 4.18 İncele
118Red HatRed Hat OpenShift Container Platform 4.18 İncele
119Red HatRed Hat OpenShift Container Platform 4.18 İncele
120Red HatRed Hat OpenShift Container Platform 4.18 İncele
121Red HatRed Hat OpenShift Container Platform 4.18 İncele
122Red HatRed Hat OpenShift Container Platform 4.18 İncele
123Red HatRed Hat OpenShift Container Platform 4.18 İncele
124Red HatRed Hat OpenShift Container Platform 4.18 İncele
125Red HatRed Hat OpenShift Container Platform 4.18 İncele
126Red HatRed Hat OpenShift Container Platform 4.18 İncele
127Red HatRed Hat OpenShift Container Platform 4.18 İncele
128Red HatRed Hat OpenShift Container Platform 4.18 İncele
129Red HatRed Hat OpenShift Container Platform 4.18 İncele
130Red HatRed Hat OpenShift Container Platform 4.18 İncele
131Red HatRed Hat OpenShift Container Platform 4.18 İncele
132Red HatRed Hat OpenShift Container Platform 4.18 İncele
133Red HatRed Hat OpenShift Container Platform 4.18 İncele
134Red HatRed Hat OpenShift Container Platform 4.18 İncele
135Red HatRed Hat OpenShift Container Platform 4.18 İncele
136Red HatRed Hat OpenShift Container Platform 4.18 İncele
137Red HatRed Hat OpenShift Container Platform 4.18 İncele
138Red HatRed Hat OpenShift Container Platform 4.18 İncele
139Red HatRed Hat OpenShift Container Platform 4.18 İncele
140Red HatRed Hat OpenShift Container Platform 4.18 İncele
141Red HatRed Hat OpenShift Container Platform 4.18 İncele
142Red HatRed Hat OpenShift Container Platform 4.18 İncele
143Red HatRed Hat OpenShift Container Platform 4.18 İncele
144Red HatRed Hat OpenShift Container Platform 4.18 İncele
145Red HatRed Hat OpenShift Container Platform 4.18 İncele
146Red HatRed Hat OpenShift Container Platform 4.18 İncele
147Red HatRed Hat OpenShift Container Platform 4.18 İncele
148Red HatRed Hat OpenShift Container Platform 4.18 İncele
149Red HatRed Hat OpenShift Container Platform 4.18 İncele
150Red HatRed Hat OpenShift Container Platform 4.18 İncele
151Red HatRed Hat OpenShift Container Platform 4.18 İncele
152Red HatRed Hat OpenShift Container Platform 4.18 İncele
153Red HatRed Hat OpenShift Container Platform 4.18 İncele
154Red HatRed Hat OpenShift Container Platform 4.18 İncele
155Red HatRed Hat OpenShift Container Platform 4.18 İncele
156Red HatRed Hat OpenShift Container Platform 4.18 İncele
157Red HatRed Hat OpenShift Container Platform 4.18 İncele
158Red HatRed Hat OpenShift Container Platform 4.18 İncele
159Red HatRed Hat OpenShift Container Platform 4.18 İncele
160Red HatRed Hat OpenShift Container Platform 4.18 İncele
161Red HatRed Hat OpenShift Container Platform 4.18 İncele
162Red HatRed Hat OpenShift Container Platform 4.18 İncele
163Red HatRed Hat OpenShift Container Platform 4.18 İncele
164Red HatRed Hat OpenShift Container Platform 4.18 İncele
165Red HatRed Hat OpenShift Container Platform 4.18 İncele
166Red HatRed Hat OpenShift Container Platform 4.18 İncele
167Red HatRed Hat OpenShift Container Platform 4.18 İncele
168Red HatRed Hat OpenShift Container Platform 4.18 İncele
169Red HatRed Hat OpenShift Container Platform 4.18 İncele
170Red HatRed Hat OpenShift Container Platform 4.18 İncele
171gogithub.com/openshift/builder İncele
172gogithub.com/openshift/builder İncele
Total Affected Vendor: 3|Products: 172

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
9.1CVSS V3_1CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HCVE CNA
9.1CVSS V31CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HNVD
9.1CVSS 3.x—Vektör yayımlanmadıGitHub Advisory
6.4CVSS 4.0—Vektör yayımlanmadıGitHub Advisory

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Yama doğrulanana kadar üretici bültenini izleyin; bilinmeyen durumu “yama yok” olarak yorumlamayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE için henüz doğrulanmış public PoC, exploit repository’si veya Metasploit modülü bulunamadı.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-7387 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-7387 weaknesses.

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiYüksek
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

CVSS Vektör Radar Grafiği

9.1 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredHigh (Yüksek Yetki)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)High (Yüksek)

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Üreticiyi takip et

R
redhat logo
redhat
RH
Red Hat logo
Red Hat
G
go logo
go

Zafiyet Türü (CWE & CAPEC)

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-7387"