Critical severity · published Sep 16, 2024
CVE-2024-7387
Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
9.1
CVSS
2.3%
EPSS
No
On KEV
Description
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat OpenShift Container Platform 4.12 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4.13 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4.14 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4.15 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4.16 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4.17 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4.18 · Red Hat
All versions, or not specified · source: vendor
Affected product
RH
Red Hat OpenShift Container Platform 4.12
Red Hat
More from Red Hat OpenShift Container Platform 4.12
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
9.9
CVE-2024-45496
Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in username