Red Hat Security Advisory

RHSA-2018:3549

OpenShift Container Platform 3.10 security update

Released 2018-11-20 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.10 atomic-enterprise-service-catalog-1:3.10.72-1.git.1450.7d3f435.el7, atomic-enterprise-service-catalog-svcat-1:3.10.72-1.git.1450.7d3f435.el7, atomic-openshift-3.10.72-1.git.0.3cb2fdc.el7 +25

Fixes 1 record

TI-2018-16130 CVE-2018-1002105 · GHSA-579h-mv94-g4gp

Improper privilege management in Kubernetes

HIGH 84

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection thr…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.86978 Published 2018-12-05 Partial fix · v1.10.11, v1.11.5 +4 CWE-388