Path Traversal Vulnerability in OpenShift Console by Red Hat

CVE-2024-7631

Summary

A security flaw has been identified in the OpenShift Console, which allows authenticated users to exploit the /locales/resources.json endpoint. By manipulating the lng and ns parameters, an attacker could potentially construct unsafe file paths leading to unauthorized access to sensitive JSON files on the console's pod. This vulnerability could enable an attacker to bypass access controls and retrieve files that should be restricted.

References