We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-7557

Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai



Assignerredhat
Reserved2024-08-06
Published2024-08-08
Updated2024-09-23

Description

A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.



HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Product status

Default status
affected

Default status
affected

Default status
affected

Default status
affected

Timeline

2024-08-06:Reported to Red Hat.
2024-08-07:Made public.

Credits

Red Hat would like to thank Adam Bellusci (RedHat) for reporting this issue.

References

https://access.redhat.com/security/cve/CVE-2024-7557 vdb-entry

https://bugzilla.redhat.com/show_bug.cgi?id=2303094 (RHBZ#2303094) issue-tracking

cve.org CVE-2024-7557

nvd.nist.gov CVE-2024-7557

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-7557
Subscribe to our newsletter to learn more about our work.