PT-2018-10244 · Red Hat · Openshift Enterprise

Michael Hanselmann

+1

·

CVE-2018-1102

·

Publicado

2018-04-30

·

Atualizado

2023-02-12

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Openshift Enterprise versions 3.x
Description A flaw was found in the source-to-image function, specifically in the improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go, which leads to privilege escalation.
Recommendations For Openshift Enterprise versions 3.x, update the source-to-image function to properly validate tar file paths and prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20CWE-22

Identificadores relacionados

CVE-2018-1102
RHSA-2018:1227
RHSA-2018:1229
RHSA-2018:1231
RHSA-2018:1233
RHSA-2018:1235
RHSA-2018:1237
RHSA-2018:1239
RHSA-2018:1241
RHSA-2018:1243
RHSA-2019:0036

Produtos afetados

Openshift Enterprise