Azure Red Hat Openshift Aro
Monthly
Privilege escalation in Azure Red Hat OpenShift (ARO) lets an already-authenticated network attacker with limited rights (PR:L) bypass authorization controls (CWE-285) to gain elevated privileges with full confidentiality, integrity, and availability impact. Because the CVSS scope is changed (S:C), the compromise can extend beyond the initially authorized boundary into other components of the managed cluster or platform. There is no public exploit identified at time of analysis and it is not on the CISA KEV list, but the 9.9 CVSS and SSVC 'total' technical impact make it a high-priority patch for any ARO tenant.
Privilege escalation in Azure Red Hat OpenShift (ARO) lets an already-authenticated network attacker with limited rights (PR:L) bypass authorization controls (CWE-285) to gain elevated privileges with full confidentiality, integrity, and availability impact. Because the CVSS scope is changed (S:C), the compromise can extend beyond the initially authorized boundary into other components of the managed cluster or platform. There is no public exploit identified at time of analysis and it is not on the CISA KEV list, but the 9.9 CVSS and SSVC 'total' technical impact make it a high-priority patch for any ARO tenant.