{"id":"CVE-2024-5042","revision":"64ed91952e0b43459ed9db241bf2a4f2","records":[{"revision":"64ed91952e0b43459ed9db241bf2a4f2","observedAt":"2026-10-25T01:17:12.119+00:00","statement":{"source":"nvd","id":"CVE-2024-5042","aliases":[],"title":"A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise o…","description":"A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.","state":0,"publishedAt":"2024-05-17T14:15:21.123+00:00","modifiedAt":"2026-10-14T00:17:12.47+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · secalert@redhat.com · Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N","score":6.6,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2024:4591","https://access.redhat.com/errata/RHSA-2026:6503","https://access.redhat.com/security/cve/CVE-2024-5042","https://bugzilla.redhat.com/show_bug.cgi?id=2280921","https://github.com/advisories/GHSA-2rhx-qhxp-5jpw"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-5042","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-250"],"productCriteria":[],"sourceDates":{"published":"2024-05-17T14:15:21.123","lastModified":"2026-10-14T00:17:12.470"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2024-5042","identifiers":["CVE-2024-5042"]},"retained":false,"historicalAffected":[]}],"coverage":[]}