Red Hat Security Advisory

RHSA-2019:2552

OpenShift Container Platform 3.10 atomic-openshift-web-console security update

Released 2019-08-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.10 atomic-openshift-web-console-3.10.163-1.git.1.c3a2131.el7

Fixes 1 record

TI-2019-00336 CVE-2019-0542 · GHSA-mc23-976p-j42x

Code injection in https://xtermjs.org/ xterm.js

MEDIUM 44

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03166 Published 2019-01-09 Fixed in 3.8.1, 3.9.2 +1 CWE-94