Red Hat Security Advisory

RHSA-2020:0795

OpenShift Container Platform 3.11 security update

Released 2020-03-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 atomic-openshift-3.11.188-1.git.0.db0eaa8.el7, atomic-openshift-clients-3.11.188-1.git.0.db0eaa8.el7, atomic-openshift-clients-redistributable-3.11.188-1.git.0.db0eaa8.el7 +10

Fixes 1 record

TI-2019-02899 CVE-2019-3889 · GHSA-mgc5-697q-9jc6

Cross-site scripting in Red Hat atomic-openshift

LOW 26

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00857 Published 2019-07-11 Partial fix CWE-79