CVE-2024-5042
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A flaw in the Submariner project involves unnecessary RBAC permissions. A privileged attacker can run a malicious container on a node, steal service account tokens, and compromise other nodes or the entire cluster.
Risk Assessment
The risk includes privilege escalation within the Kubernetes cluster, potential takeover of multiple nodes, and compromise of the entire container environment.
Recommendation
Immediately update Submariner to a version that removes unnecessary RBAC permissions, and review and restrict permissions assigned to service accounts.
Original NVD description (English source)
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.