Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
Priority HIGH 74CWE-250Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-250.
Summary
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.02321 83rd percentileScored 2026-11-07
Fix Fixed Red Hat: 7 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | v4.12.0-202409121032.p1.g609473f.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | v4.13.0-202409120505.p1.g2c7e99d.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | v4.14.0-202409111409.p1.g52565ca.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409101936.p1.ge7749a3.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | v4.16.0-202409101737.p1.gfee4b58.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | v4.17.0-202409122005.p1.gcfcf3bd.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202502100215-0 | Patch available | CNA |
| — | github.com/openshift/builder (Go) | up to 4.0.0 | — | No fix listed | GHSA-qqv8-ph7f-h3f7 |
- Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in v4.12.0-202409121032.p1.g609473f.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in v4.13.0-202409120505.p1.g2c7e99d.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in v4.14.0-202409111409.p1.g52565ca.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409101936.p1.ge7749a3.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in v4.16.0-202409101737.p1.gfee4b58.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202409122005.p1.gcfcf3bd.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202502100215-0 Patch available CNA
- github.com/openshift/builder (Go) Vendor— Affected up to 4.0.0 Fixed in — No fix listed GHSA-qqv8-ph7f-h3f7
CPE names CNA · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:openshift:4.12::el8 | 4.12 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el8 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el8 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el8 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift:4.18::el9 | 4.18 | — | Red Hat |
- cpe:/a:redhat:openshift:4.12::el8 Versions 4.12 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el8 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el8 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el8 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat
Remediation
Red Hat 7 advisories
- RHSA-2024:6122 Released 2025-02-25 · Red Hat rating ImportantOpenShift Container Platform 4.18.1 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
- RHSA-2024:3718 Released 2024-10-01 · Red Hat rating ModerateOpenShift Container Platform 4.17.0 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2024:6705 Released 2024-09-19 · Red Hat rating ImportantOpenShift Container Platform 4.12.66 security update
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8
Show 4 more Red Hat advisories
- RHSA-2024:6685 Released 2024-09-19 · Red Hat rating ImportantOpenShift Container Platform 4.15.33 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel9
- RHSA-2024:6687 Released 2024-09-19 · Red Hat rating ImportantOpenShift Container Platform 4.16.13 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-docker-builder-rhel9, openshift4/ose-openshift-controller-manager-rhel9
- RHSA-2024:6689 Released 2024-09-19 · Red Hat rating ImportantOpenShift Container Platform 4.14.37 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8
- RHSA-2024:6691 Released 2024-09-19 · Red Hat rating ImportantOpenShift Container Platform 4.13.50 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-docker-builder, openshift4/ose-openshift-controller-manager-rhel8
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6685
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2024-30536 Openshift-controller-manager: elevated build pods can lead to node compromise in openshiftPriority MEDIUM 45
- Advisory ·
Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6687
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2024-30536 Openshift-controller-manager: elevated build pods can lead to node compromise in openshiftPriority MEDIUM 45
Show 3 more groups
- Advisory ·
Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6689
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2024-30536 Openshift-controller-manager: elevated build pods can lead to node compromise in openshiftPriority MEDIUM 45
- Advisory ·
Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6691
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2024-30536 Openshift-controller-manager: elevated build pods can lead to node compromise in openshiftPriority MEDIUM 45
- Advisory ·
Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13 and 5 more products — RHSA-2024:6705
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2024-30536 Openshift-controller-manager: elevated build pods can lead to node compromise in openshiftPriority MEDIUM 45
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2024:6705 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2024:6691 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2024:6689 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2024:6685 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2024:6687 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2024:3718 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2024:6122 |
Not affected: 6 products
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
Timeline
- 2026-10-02 Threatist record created from CVE-2024-7387
- 2026-10-03 Alias added: GHSA-qqv8-ph7f-h3f7
References
Advisory 8
Other 6
- https://access.redhat.com/security/cve/CVE-2024-7387
- RHBZ#2302259
- https://github.com/openshift/builder/commit/0b62633adfa2836465202bc851885e078ec888d1
- https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html
- https://github.com/openshift/builder
- https://pkg.go.dev/vuln/GO-2024-3129
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-7387 · CVE Program
- CVE-2024-7387 · NVD
- FIRST EPSS
- GHSA-qqv8-ph7f-h3f7 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-7387 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences