CVE-2024-9594
Description
A flaw was found in Kubernetes Image Builder. Kubernetes Image Builder default credentials are enabled during the image build process when using Nutanix, OVA, QEMU, or raw providers. The credentials can be used to gain root access. The credentials are disabled after the image build process. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project.
Statement
Red Hat has evaluated this vulnerability and its related components. No products are affected as the impacted component is not shipped in the Red Hat Product Portfolio.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
