Red Hat Security Advisory

RHSA-2019:3770

OpenShift Container Platform 4.2.4 oauth-server-container security update

Released 2019-11-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.2 openshift4/ose-oauth-server-rhel7

Fixes 1 record

TI-2019-02899 CVE-2019-3889 · GHSA-mgc5-697q-9jc6

Cross-site scripting in Red Hat atomic-openshift

LOW 26

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00857 Published 2019-07-11 Partial fix CWE-79