CVE-2021-3636

State: Published
Severity: Not scored
Published: Jul 30, 2021
Updated: Aug 3, 2024
Reserved: Jul 2, 2021

Description

It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.

Scores

The record has no CVSS score.

Weaknesses

CWE-295 >CWE-287

Affected Products

Product	Versions
openshiftn/a	openshift 4.8Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1978621

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.