Vendors / OpenShift Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now OpenShift records in CISA KEV No OpenShift vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0199 · Published 2019-12-11 · No fix listed CWE-78
Priority LOW 35
A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred.
CVSS 3.1 HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.01072 · Published 2020-06-12 · Will not fix CWE-522
Priority LOW 34
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2019-11-15 · No fix listed CWE-668
Priority LOW 29
A CSRF issue was found in OpenShift Enterprise 1.2.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00435 · Published 2019-12-30 · Fixed CWE-352
Priority LOW 28
A vulnerability was found in OpenShift OSIN.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0072 · Published 2022-12-28 · Fixed in 1.0.2-0.20210113124101-8612686d6dda CWE-208
Priority LOW 25
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00757 · Published 2022-07-07 · Fixed in 1.0.0 CWE-614
Priority LOW 23
openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information…
CVSS 3.0 MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00369 · Published 2016-08-05 · No fix listed CWE-255
Open these records in search → All records by CVSS severity
0 3 4 0 0
THREATIST.IORead the docs