CVE-2021-3636
Last modified
CVE-2021-3636 is a medium-severity vulnerability rated 4.6/10 on the CVSS scale. It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.
Metrics
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Openshift | < 4.8 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1978621Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1978621Exploit, Issue Tracking, Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-3636?
How severe is CVE-2021-3636?
How do I fix CVE-2021-3636?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-36350Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an au…7.5
- CVE-2021-36351SQL Injection Vulnerability in Care2x Open Source Hospital I…9.8
- CVE-2021-36352Stored cross-site scripting (XSS) vulnerability in Care2x Ho…5.4
- CVE-2021-36356KRAMER VIAware through August 2021 allows remote attackers t…9.8
- CVE-2021-36357An issue was discovered in OpenPOWER 2.6 firmware. unpack_ti…9.8
- CVE-2021-36359OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenti…8.8
- CVE-2021-36363Nagios XI before 5.8.5 has Incorrect Permission Assignment f…9.8
- CVE-2021-36364Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildc…9.8
- CVE-2021-36365Nagios XI before 5.8.5 has Incorrect Permission Assignment f…9.8
- CVE-2021-36366Nagios XI before 5.8.5 incorrectly allows manage_services.sh…9.8
- CVE-2021-36367PuTTY through 0.75 proceeds with establishing an SSH session…8.1
- CVE-2021-36368An issue was discovered in OpenSSH before 8.9. If a client i…3.7
Are you affected by CVE-2021-3636?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST