Unrestricted Access via Crafted .gitconfig File in OpenShift Build Process
CVE-2024-45496

9.9CRITICAL

Key Information:

Status: Red Hat Openshift Container Platform 4.12; Red Hat Openshift Container Platform 4.13; Red Hat Openshift Container Platform 4.14
Vendor: CVE Published:; 17 September 2024

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-45496?

A flaw exists in the OpenShift Container Platform due to the improper handling of elevated privileges during the build process. Specifically, the git-clone container operates with a privileged security context during the build initialization phase, granting unrestricted access to the underlying node. This vulnerability can be exploited by an attacker with developer-level access who provides a specially crafted .gitconfig file. The content of this file can execute arbitrary commands during the cloning process, leading to potential escalation of privileges for the attacker on the worker node where the container is running.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

cve-2024-45496
Created by 0xSigSegv0x00