Red Hat Security AdvisoryRHSA-2020:3727
OpenShift Container Platform 3.11.286 security update
Released 2020-09-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.11 openshift3/ose-docker-registry, openshift3/ose-logging-kibana5
Fixes 2 records
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01886 · Published 2020-06-17 · Partial fix · 0.3.3 CWE-835
Priority LOW 21
It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00713 · Published 2021-06-02 · Partial fix CWE-358
