Vendors / OpenShift Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now OpenShift records in CISA KEV No OpenShift vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 25
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00757 · Published 2022-07-07 · Fixed in 1.0.0 CWE-614
Priority LOW 23
openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information…
CVSS 3.0 MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00369 · Published 2016-08-05 · No fix listed CWE-255
Open these records in search → All records by CVSS severity
0 3 4 0 0
