Red Hat Security AdvisoryRHSA-2016:2064
atomic-openshift security update
Released 2016-10-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.2 atomic-openshift-3.2.1.17-1.git.0.6d01b60.el7, atomic-openshift-clients-3.2.1.17-1.git.0.6d01b60.el7, atomic-openshift-clients-redistributable-3.2.1.17-1.git.0.6d01b60.el7 +8
- Red Hat OpenShift Container Platform 3.3 atomic-openshift-3.3.0.35-1.git.0.d7bd9b6.el7, atomic-openshift-clients-3.3.0.35-1.git.0.d7bd9b6.el7, atomic-openshift-clients-redistributable-3.3.0.35-1.git.0.d7bd9b6.el7 +7
- Red Hat OpenShift Enterprise 3.1 atomic-openshift-3.1.1.8-1.git.0.d469026.el7aos, atomic-openshift-clients-3.1.1.8-1.git.0.d469026.el7aos, atomic-openshift-clients-redistributable-3.1.1.8-1.git.0.d469026.el7aos +7
Fixes 1 record
Priority LOW 38
It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.01568 · Published 2018-09-10 · Fixed CWE-295
