Red Hat Security AdvisoryRHSA-2018:3742
OpenShift Container Platform 3.2 security update
Released 2018-12-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.2 atomic-openshift-3.2.1.34-2.git.20.6367d5d.el7, atomic-openshift-clients-3.2.1.34-2.git.20.6367d5d.el7, atomic-openshift-clients-redistributable-3.2.1.34-2.git.20.6367d5d.el7 +10
Fixes 1 record
Priority HIGH 84
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection thr…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86978 · Published 2018-12-05 · Partial fix · v1.10.11, v1.11.5 +4 CWE-388
