Red Hat Security Advisory

RHSA-2020:0020

OpenShift Container Platform 3.11 atomic-openshift security update

Released 2020-01-14 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 atomic-openshift-3.11.161-1.git.0.4ccbe25.el7, atomic-openshift-clients-3.11.161-1.git.0.4ccbe25.el7, atomic-openshift-clients-redistributable-3.11.161-1.git.0.4ccbe25.el7 +10

Fixes 1 record

TI-2019-08414 CVE-2019-11244 · GHSA-2575-pghm-6qqx

kubectl creates world-writeable cached schema files

LOW 23

In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-).

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00498 Published 2019-04-22 Partial fix · 1.12.9 CWE-524