CVE-2024-7557 Information

Description

A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models the UI provides the option to protect models with authentication. However credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens visible in the UI can be utilized with oc –token=token to exploit the elevated view privileges associated with the ServiceAccount leading to unauthorized access to additional resources.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

https://access.redhat.com/security/cve/CVE-2024-7557 https://bugzilla.redhat.com/show_bug.cgi?id=2303094

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8