CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: source-to-image component of openshift container platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. an attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-07-02
Last Modified Date: 2019-10-09