Improper authentication in Red Hat OpenShift Container Platform 4.12
Priority LOW 35CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-287.
Summary
A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00447 39th percentileScored 2026-11-07
Fix Fixed Red Hat: 11 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | 1784323891 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 1784056734 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 1784587649 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 1784580646 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 1784331638 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | 1784321465 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 1783719377 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | 1783445642 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — | 1781639027 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — | 1781552170 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | — | 1781643967 | Patch available | CNA |
- Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in 1784323891 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 1784056734 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 1784587649 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 1784580646 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 1784331638 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 1784321465 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 1783719377 Patch available CNA
- Red Hat OpenShift Container Platform 4.19 VendorRed Hat Affected — Fixed in 1783445642 Patch available CNA
- Red Hat OpenShift Container Platform 4.20 VendorRed Hat Affected — Fixed in 1781639027 Patch available CNA
- Red Hat OpenShift Container Platform 4.21 VendorRed Hat Affected — Fixed in 1781552170 Patch available CNA
- Red Hat OpenShift Container Platform 4.22 VendorRed Hat Affected — Fixed in 1781643967 Patch available CNA
Remediation
Red Hat 11 advisories
- RHSA-2026:47728 Released 2026-08-06 · Red Hat rating CriticalOpenShift Container Platform 4.17.56 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9 +7
- RHSA-2026:47703 Released 2026-08-06 · Red Hat rating ImportantOpenShift Container Platform 4.12.95 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-haproxy-router
- RHSA-2026:43227 Released 2026-07-30 · Red Hat rating ImportantOpenShift Container Platform 4.15.67 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9 +4
Show 8 more Red Hat advisories
- RHSA-2026:43253 Released 2026-07-30 · Red Hat rating ImportantOpenShift Container Platform 4.14.70 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8, registry.redhat.io/openshift4/ose-haproxy-router, registry.redhat.io/openshift4/ose-openshift-apiserver-rhel8
- RHSA-2026:43331 Released 2026-07-30 · Red Hat rating ImportantOpenShift Container Platform 4.16.67 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/ose-haproxy-router-rhel9
- RHSA-2026:40022 Released 2026-07-23 · Red Hat rating ImportantOpenShift Container Platform 4.13.69 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8, registry.redhat.io/openshift4/ose-console, registry.redhat.io/openshift4/ose-haproxy-router +4
- RHSA-2026:40828 Released 2026-07-22 · Red Hat rating ImportantOpenShift Container Platform 4.18.49 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9, registry.redhat.io/openshift4/ose-haproxy-router-rhel9
- RHSA-2026:37580 Released 2026-07-15 · Red Hat rating ImportantOpenShift Container Platform 4.19.38 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9, registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator, registry.redhat.io/openshift4/ose-haproxy-router-rhel9
- RHSA-2026:27009 Released 2026-06-23 · Red Hat rating ImportantOpenShift Container Platform 4.22.2 bug fix and security update
- Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/ose-haproxy-router-rhel9
- RHSA-2026:27063 Released 2026-06-23 · Red Hat rating ImportantOpenShift Container Platform 4.20.26 bug fix and security update
- Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-console-rhel9 +3
- RHSA-2026:27044 Released 2026-06-23 · Red Hat rating ImportantOpenShift Container Platform 4.21.21 bug fix and security update
- Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-haproxy-router-rhel9, registry.redhat.io/openshift4/ose-installer-artifacts-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2026:47703 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:40022 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:43253 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:43227 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:43331 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:47728 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:40828 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:37580 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:27063 |
| Red Hat OpenShift Container Platform 4.21 | Fixed | RHSA-2026:27044 |
| Red Hat OpenShift Container Platform 4.22 | Fixed | RHSA-2026:27009 |
Not affected: 11 products
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- Red Hat OpenShift Container Platform 4.21
- Red Hat OpenShift Container Platform 4.22
Timeline
- 2026-10-02 Threatist record created from CVE-2026-46579
- 2026-10-03 Alias added: GHSA-ccmj-8c3p-4qwj
References
More Red Hat Openshift Container Platform vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
- TI-2026-34021 Linux kernel skb coalescing drops shared-frag marker KEVCVSS 3.1HIGH 7.8
- TI-2026-23989 crypto: algif_aead - Revert to operating out-of-place KEVCVSS 3.1HIGH 7.8
Sources
- CVE-2026-46579 · CVE Program
- CVE-2026-46579 · NVD
- FIRST EPSS
- GHSA-ccmj-8c3p-4qwj · GitHub Advisory Database · CC BY 4.0
- CVE-2026-46579 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences