CVE-2015-5222 Privilege escalation in n/a
Authenticated users with build permissions can execute arbitrary shell commands as root on build pods due to improper permission checks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5222?
CVE-2015-5222 is a high-severity vulnerability in Redhat Openshift, published on 24 Aug 2015. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute arbitrary shell commands with root permissions on arbitrary build pods via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2015-5222?
It affects 1 product.
Linux distribution packages (6)
openshift Red Hat:openshift:3.0::el7 | All versions | 0:3.0.1.0-1.git.527.f8d5fed.el7ose |
openshift-clients Red Hat:openshift:3.0::el7 | All versions | 0:3.0.1.0-1.git.527.f8d5fed.el7ose |
openshift-master Red Hat:openshift:3.0::el7 | All versions | 0:3.0.1.0-1.git.527.f8d5fed.el7ose |
openshift-node Red Hat:openshift:3.0::el7 | All versions | 0:3.0.1.0-1.git.527.f8d5fed.el7ose |
openshift-sdn-ovs Red Hat:openshift:3.0::el7 | All versions | 0:3.0.1.0-1.git.527.f8d5fed.el7ose |
tuned-profiles-openshift-node Red Hat:openshift:3.0::el7 | All versions | 0:3.0.1.0-1.git.527.f8d5fed.el7ose |
Products include Redhat Openshift.
How do I fix CVE-2015-5222?
Apply the vendor's patch.
Is CVE-2015-5222 being exploited?
There is no known exploitation of CVE-2015-5222 in the wild and no public exploit code.
Other vulnerabilities in Redhat Openshift
Sources
Also known as GHSA-x7xw-w98q-fgfm, RHSA-2015:1650.