Red Hat Security AdvisoryRHSA-2018:3598
OpenShift Container Platform 3.6 security update
Released 2018-12-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.6 atomic-openshift-3.6.173.0.140-1.git.0.9686d52.el7, atomic-openshift-clients-3.6.173.0.140-1.git.0.9686d52.el7, atomic-openshift-clients-redistributable-3.6.173.0.140-1.git.0.9686d52.el7 +20
Fixes 1 record
Priority HIGH 84
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection thr…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86978 · Published 2018-12-05 · Partial fix · v1.10.11, v1.11.5 +4 CWE-388
