The vulnerability CVE-2024-7387 affects the openshift/builder component in Red Hat OpenShift Container Platform. It allows command injection through path traversal by manipulating the spec.source.secrets.secret.destinationDir attribute in BuildConfig when using the Docker build strategy. This enables an attacker with code execution in a privileged build container to escalate privileges on the underlying node. Red Hat has issued security advisories RHSA-2024:3718 and RHSA-2024:6685 detailing fixes in OpenShift Container Platform 4.17.0 and 4.15.33 respectively. The advisories include updated container images and instructions for upgrading clusters to mitigate the vulnerability.

Successful exploitation of this vulnerability allows an attacker with access to a privileged build container to execute arbitrary commands on the OpenShift node, leading to full compromise of the node. The CVSS score of 9.1 reflects the critical nature of this vulnerability with high impact on confidentiality, integrity, and availability. This could enable attackers to escalate privileges and potentially control the host system running the container.

Red Hat has released official security updates for OpenShift Container Platform versions 4.15.33 and 4.17.0 that address CVE-2024-7387. Users should upgrade their OpenShift clusters to these or later versions using the OpenShift CLI (oc) or web console as per the vendor's upgrade instructions. The vendor manages remediation for these container images and provides detailed guidance in the referenced advisories and release notes. No alternative mitigations are indicated; applying the official updates is required to remediate the vulnerability.