CyberRota Analysis
AI-GeneratedThe vulnerability arises from improper handling of shell variables in the scripts of openshift-metal3/fakefish, allowing for unquoted variable injection in command lines and manifests, particularly affecting Image URLs and BMC credentials. This flaw poses a significant risk as it could lead to command injection attacks, potentially compromising the integrity and security of the system. Organizations utilizing openshift-metal3/fakefish should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials (which are not verified by FakeFish).