Red Hat Fence Agents Remediation Operator SSH/Telnet code injection

Summaryinfo

A vulnerability described as critical has been identified in Red Hat Fence Agents Remediation Operator. This issue affects some unknown processing of the component SSH/Telnet. The manipulation results in code injection. This vulnerability is identified as CVE-2024-5651. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in Red Hat Fence Agents Remediation Operator (unknown version). It has been classified as critical. Affected is an unknown code block of the component SSH/Telnet. The manipulation with an unknown input leads to a code injection vulnerability. CWE is classifying the issue as CWE-94. The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A flaw was found in fence agents that rely on SSH/Telnet. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator's pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.

The advisory is available at access.redhat.com. This vulnerability is traded as CVE-2024-5651 since 06/05/2024. The exploitability is told to be easy. It is possible to launch the attack remotely. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 07/15/2025). This vulnerability is assigned to T1059 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-47156). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Red Hat

Name

• Fence Agents Remediation Operator

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion