Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat OpenShift AI 2.25
Vendor
Red Hat
Product
Red Hat OpenShift AI 2.25
Platforms
Unknown
Default status
affected
Package
rhoai/odh-dashboard-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 2.25 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1785940823
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 2.25
Vendor
Red Hat
Product
Red Hat OpenShift AI 2.25
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-model-registry-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 2.25 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791853432
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.3
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.3
Platforms
Unknown
Default status
affected
Package
rhoai/odh-dashboard-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1786109683
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-dashboard-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1786109665
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-automl-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791861032
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-autorag-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791860994
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-eval-hub-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791861214
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-gen-ai-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791861479
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-maas-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791860708
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-mlflow-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1791861383
unaffected
rpm
*
Unavailable
None listed
Red Hat OpenShift AI 3.4
Vendor
Red Hat
Product
Red Hat OpenShift AI 3.4
Platforms
Unknown
Default status
affected
Package
rhoai/odh-mod-arch-model-registry-rhel9
Package collection
https://catalog.redhat.com/software/containers/
Red Hat OpenShift AI 3.4 · Scoped product and version facts