CVE-2024-33398 - OpenCVE

There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Piraeus Operator	Piraeus Operator

No data.

No data.

References

Link	Providers
https://gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edb
https://github.com/HouqiyuA/k8s-rbac-poc
https://github.com/piraeusdatastore/piraeus-operator
https://piraeus.io/

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-05-03T00:00:00

Updated: 2024-08-02T02:27:53.612Z

Reserved: 2024-04-23T00:00:00

Link: CVE-2024-33398

Vulnrichment

Updated: 2024-05-15T16:20:54.547Z

NVD

Status : Awaiting Analysis

Published: 2024-05-03T16:15:11.393

Modified: 2024-07-03T01:58:02.040

Link: CVE-2024-33398

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-33398", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-02T02:27:53.612Z", "dateReserved": "2024-04-23T00:00:00", "datePublished": "2024-05-03T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-03T15:29:27.416224"}, "descriptions": [{"lang": "en", "value": "There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/HouqiyuA/k8s-rbac-poc"}, {"url": "https://github.com/piraeusdatastore/piraeus-operator"}, {"url": "https://piraeus.io/"}, {"url": "https://gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edb"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-33398", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-15T16:15:43.453351Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:piraeus_operator:piraeus_operator:2.5.0:*:*:*:*:*:*:*"], "vendor": "piraeus_operator", "product": "piraeus_operator", "versions": [{"status": "affected", "version": "2.5.0*", "lessThan": "2.5.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:44:55.399Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:27:53.612Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/HouqiyuA/k8s-rbac-poc", "tags": ["x_transferred"]}, {"url": "https://github.com/piraeusdatastore/piraeus-operator", "tags": ["x_transferred"]}, {"url": "https://piraeus.io/", "tags": ["x_transferred"]}, {"url": "https://gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edb", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-33398", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-06-04T17:44:55.399Z", "dateReserved": "2024-04-23T00:00:00", "datePublished": "2024-05-03T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-03T15:29:27.416224"}, "descriptions": [{"lang": "en", "value": "There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/HouqiyuA/k8s-rbac-poc"}, {"url": "https://github.com/piraeusdatastore/piraeus-operator"}, {"url": "https://piraeus.io/"}, {"url": "https://gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edb"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-33398", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-15T16:15:43.453351Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:piraeus_operator:piraeus_operator:2.5.0:*:*:*:*:*:*:*"], "vendor": "piraeus_operator", "product": "piraeus_operator", "versions": [{"status": "affected", "version": "2.5.0*", "lessThan": "2.5.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-15T16:20:54.547Z"}, "title": "CISA ADP Vulnrichment"}]}}