Skip to main content

Improper Privilege Management

CVE-2024-33522

High
8.6/10

Summary

In vulnerable versions of Calico, an attacker who has local access to the Kubernetes node can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. The issue arises from an incorrect SUID (Set User ID) bit configuration in the binary, combined with the ability to control the input binary, allowing an attacker to execute an arbitrary binary with elevated privileges. The vulnerability affects github.com/projectcalico/calico versions through 3.26.4, versions 3.27.0 through 3.27.2, and 3.28.0-0.dev Calico Cloud versions through v19.2.0, Calico Enterprise versions through 3.17.3, 3.18.0 through 3.18.1, and 3.19.0 through 3.19.0-1.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • NONE
  • HIGH
  • HIGH
  • HIGH

CWE-269 - Improper Privilege Management

An effective privilege management infrastructure provides valid users with required access and privileges across heterogeneous technology environments. An application with a faulty privilege management infrastructure allows higher than authorized privileges or enables privilege escalation. This can lead to security incidents such as system infiltration, data breach, and complete system takeover.

References

Advisory Timeline

  • Published