PT-2018-10141 · Red Hat · Openshift-Ansible

David Hocky + 1 · Published 2018-06-15 · Updated 2019-10-09 · CVE-2018-1085

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openshift-ansible versions prior to 3.9.23 openshift-ansible versions prior to 3.7.46

Description The issue is related to a misconfigured etcd file deployed by openshift-ansible, which causes SSL client certificate authentication to be disabled. This is due to quotations around the values of ETCD CLIENT CERT AUTH and ETCD PEER CLIENT CERT AUTH in etcd.conf, resulting in etcd being configured to allow remote users to connect without authentication if they can access the etcd server on the master nodes. An attacker could exploit this to read and modify data about the Openshift cluster in the etcd datastore, potentially adding another compute node or bringing down the entire cluster.

Recommendations For versions prior to 3.9.23, update to version 3.9.23 or later to resolve the issue. For versions prior to 3.7.46, update to version 3.7.46 or later to resolve the issue. As a temporary workaround, consider restricting access to the etcd server on the master nodes to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-592

CWE-287

Related Identifiers

CVE-2018-1085

RHSA-2018:2013

Affected Products

Openshift-Ansible

References · 4

• https://osv.dev/vulnerability/CVE-2018-1085 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1085 · Security Note
• https://access.redhat.com/errata/RHSA-2018:2013 · Vendor Advisory