title: Openshift api admission checks does not enforce "custom-host" permissions
description: A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.
problem types: Incorrect Authorization
affected:
{
product: kubernetes
vendor: n/a
defaultStatus: affected
}
{
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rhacm2/agent-service-rhel8
defaultStatus: affected
cpes: cpe:/a:redhat:acm:2
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 1.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kubernetes
defaultStatus: unaffected
cpes: cpe:/a:redhat:ansible_automation_platform
}
{
vendor: Red Hat
product: Red Hat Ansible Tower 3
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kubernetes
defaultStatus: unaffected
cpes: cpe:/a:redhat:ansible_tower:3
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 3.11
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: atomic-openshift
defaultStatus: unknown
cpes: cpe:/a:redhat:openshift:3.11
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift
defaultStatus: affected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-clients
defaultStatus: affected
cpes: cpe:/a:redhat:openshift:4
}
metrics:
other: [
content: {'value': 'Low', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]