CVE-2024-9779

A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named "cluster-manager", which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager's token and steal any service account token by creating and mounting the target service account to control the whole cluster.

• CWE-266

• https://access.redhat.com/security/cve/CVE-2024-9779
• https://bugzilla.redhat.com/show_bug.cgi?id=2317916
• https://github.com/open-cluster-management-io/ocm/pull/325
• https://github.com/open-cluster-management-io/ocm/releases/tag/v0.13.0
• https://github.com/open-cluster-management-io/registration-operator/issues/361

Published

Dec 17, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9773An issue was discovered in GitLab EE affecting all versions …8
• CVE-2024-9774A vulnerability was found in python-sql where unary operator…6.5
• CVE-2024-9775The Anih - Creative Agency WordPress Theme theme for WordPre…4.8
• CVE-2024-9776The ImagePress – Image Gallery plugin for WordPress is vulne…4.8
• CVE-2024-9777The Ashe theme for WordPress is vulnerable to Reflected Cros…6.1
• CVE-2024-9778The ImagePress – Image Gallery plugin for WordPress is vulne…4.3
• CVE-2024-9780ITS dissector crash in Wireshark 4.4.0 allows denial of serv…5.5
• CVE-2024-9781AppleTalk and RELOAD Framing dissector crash in Wireshark 4.…7.5
• CVE-2024-9782A vulnerability was found in D-Link DIR-619L B1 2.06. It has…8.8
• CVE-2024-9783A vulnerability was found in D-Link DIR-619L B1 2.06. It has…8.8
• CVE-2024-9784A vulnerability classified as critical has been found in D-L…8.8
• CVE-2024-9785A vulnerability classified as critical was found in D-Link D…8.8