A privilege escalation vulnerability exists in OpenShift Container Platform which allows for compromise of pods running co-located on a compute node. This access could include access to all secrets, pods, environment variables, running pod/container processes, and persistent volumes, including in privileged containers.

Mitigation

See the vulnerability article for mitigation procedures.

References

bugzilla.redhat.com/show_bug.cgi?id=1648138

www.cve.org/CVERecord?id=CVE-2018-1002105 https://nvd.nist.gov/vuln/detail/CVE-2018-1002105 https://access.redhat.com/security/vulnerabilities/3716411 https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88

github 1

oraclelinux 3

nessus 20

fedora 2

debiancve 1

osv 2

cvelist 1

nvd 1

redhat 10

cve 1

qualysblog 1

threatpost 3