Red Hat Security Advisory

RHSA-2019:4225

OpenShift Container Platform 4.1 openshift-external-storage security update

Released 2019-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift-external-storage-0.0.2-11.gitd3c94f0.el7, openshift-external-storage-cephfs-provisioner-0.0.2-11.gitd3c94f0.el7, openshift-external-storage-efs-provisioner-0.0.2-11.gitd3c94f0.el7 +4

Fixes 1 record

TI-2019-08425 CVE-2019-11255 · GHSA-f4w6-3rh6-6q4q

Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

LOW 33

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2)…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.02014 Published 2019-12-05 Fixed in 1.0.2, 1.2.2 +4 CWE-20