AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-25132

MEDIUM · CVSS 4.3 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-19 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It may lead to a denial-of-service condition.

CVE
CVE-2024-25132
Severity
MEDIUM
CVSS
4.3
EPSS
0.32%

Original NVD Description

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If a ClusterSync.hiveinternal.openshift.io/v1alpha1 resource is also created, the hive hibernation controller will enter the reconciliation loop leading to a panic when accessing a non-existing field in the ClusterDeployment’s status section, resulting in a denial of service.