PT-2023-22090 · Unknown · Openfeature Operator

Younaman · Published 2023-04-12 · Updated 2024-08-20 · CVE-2023-29018

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenFeature Operator versions prior to 0.2.32

Description The issue allows an attacker to escalate the privileges of any service account in the cluster, assuming the pre-existence of a vulnerability that enables arbitrary code execution. This could lead to modification of cluster state, resulting in Denial of Service (DoS), or reading sensitive data, including secrets. The lax permissions configured on open-feature-operator-controller-manager are leveraged to achieve this escalation.

Recommendations For versions prior to 0.2.32, update to version 0.2.32 to mitigate the issue by restricting the resources the open-feature-operator-controller-manager can modify. As a temporary workaround, consider restricting the permissions of the open-feature-operator-controller-manager to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-29018

GHSA-CWF6-XJ49-WP83

GO-2023-1721

Affected Products

Openfeature Operator

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29018.json · Exploit
• https://github.com/open-feature/open-feature-operator/security/advisories/GHSA-cwf6-xj49-wp83 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29018 · Security Note
• https://osv.dev/vulnerability/GO-2023-1721 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-29018 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cwf6-xj49-wp83 · Vendor Advisory
• https://github.com/open-feature/open-feature-operator · Note
• https://github.com/open-feature/open-feature-operator/releases/tag/v0.2.32 · Note
• https://t.me/cibsecurity/62175 · Telegram Post
• https://t.me/cvenotify/49029 · Telegram Post