CVE-2024-13484

CVE-2024-13484 is a high-severity vulnerability in the openshift-gitops-operator-container that allows a privileged attacker to disrupt platform monitoring. By applying the openshift.io/cluster-monitoring label to namespaces deploying an ArgoCD CR instance, a rogue PrometheusRule can be created, which is then rolled out cluster-wide. This local attack, requiring high privileges and having low complexity, can lead to significant impacts on confidentiality, integrity, and availability of the monitoring stack. There is currently no known active exploitation, public exploit code, or KEV listing, though it has garnered some community discussion and media coverage.