Record status Published
Identifier year (not publication year) 2024
Source publication May 17, 2024
Source updated Oct 13, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Submariner-operator: rbac permissions can allow for the spread of node compromises
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
submariner-operator
Vendor Unknown
Product Unknown
Platforms Unknown
Default status unaffected
Package submariner-operator
Package collection https://github.com/submariner-io/submariner-operator
submariner-operator · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedsemver 0.14.9 Unavailable None listed 0.15.0 affectedsemver 0.15.5 Unavailable None listed 0.16.0 affectedsemver 0.16.7 Unavailable None listed 0.17.0 affectedcustom 0.17.2 Unavailable None listed 0.18.0-m0 affectedcustom 0.18.0-rc0 Unavailable None listed
RHODF-4.16-RHEL-9
Vendor Red Hat
Product RHODF-4.16-RHEL-9
Platforms Unknown
Default status affected
Package odf4/odf-multicluster-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
RHODF-4.16-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) v4.16.0-19 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/cephcsi-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774540992 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/cephcsi-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774540668 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/mcg-core-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541259 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/mcg-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541345 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/ocs-client-console-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541880 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/ocs-client-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541518 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/ocs-metrics-exporter-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541420 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/ocs-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541448 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-cli-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541663 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-cloudnative-pg-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541469 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-console-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774542075 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-cosi-sidecar-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541617 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-csi-addons-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541614 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-csi-addons-sidecar-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541633 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-external-snapshotter-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541625 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-external-snapshotter-sidecar-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541625 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-multicluster-console-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774542179 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-multicluster-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541779 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-must-gather-rhel9
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541857 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odf-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541919 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/odr-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774541919 unaffectedrpm * Unavailable None listed
Red Hat Openshift Data Foundation 4.20
Vendor Red Hat
Product Red Hat Openshift Data Foundation 4.20
Platforms Unknown
Default status affected
Package odf4/rook-ceph-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
Red Hat Openshift Data Foundation 4.20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1774542101 unaffectedrpm * Unavailable None listed
Red Hat Advanced Cluster Management for Kubernetes 2
Vendor Red Hat
Product Red Hat Advanced Cluster Management for Kubernetes 2
Platforms Unknown
Default status affected
Package rhacm2/lighthouse-agent-rhel9
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
Vendor Red Hat
Product Red Hat Advanced Cluster Management for Kubernetes 2
Platforms Unknown
Default status affected
Package rhacm2/lighthouse-coredns-rhel9
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
Vendor Red Hat
Product Red Hat Advanced Cluster Management for Kubernetes 2
Platforms Unknown
Default status affected
Package rhacm2/submariner-gateway-rhel9
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
Vendor Red Hat
Product Red Hat Advanced Cluster Management for Kubernetes 2
Platforms Unknown
Default status affected
Package rhacm2/submariner-globalnet-rhel9
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
Vendor Red Hat
Product Red Hat Advanced Cluster Management for Kubernetes 2
Platforms Unknown
Default status affected
Package rhacm2/submariner-rhel9-operator
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
Vendor Red Hat
Product Red Hat Advanced Cluster Management for Kubernetes 2
Platforms Unknown
Default status affected
Package rhacm2/submariner-route-agent-rhel8
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.