Red Hat Security AdvisoryRHSA-2018:3752
OpenShift Container Platform 3.4 security update
Released 2018-12-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.4 atomic-openshift-3.4.1.44.57-1.git.0.a631031.el7, atomic-openshift-clients-3.4.1.44.57-1.git.0.a631031.el7, atomic-openshift-clients-redistributable-3.4.1.44.57-1.git.0.a631031.el7 +17
Fixes 1 record
Priority HIGH 84
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection thr…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86978 · Published 2018-12-05 · Partial fix · v1.10.11, v1.11.5 +4 CWE-388
