Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

146 records

Vendor: Red Hat Component: Openshift Clear all filters
TI-2024-11209 CVE-2024-12085 · GHSA-xh5q-pch5-g3xq

Rsync: info leak via uninitialized stack contents

Priority HIGH 72

A flaw was found in rsync which could be triggered when rsync compares file checksums.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08641 Published 2025-01-14 Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
TI-2023-00219 CVE-2023-0229 · GHSA-5465-xc2j-6p84

Improper input validation in github.com/openshift/apiserver-library-go

Priority LOW 29

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined."…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00665 Published 2023-01-25 Fixed in 0.0.0-20230120221150-cefee9e0162b CWE-20
TI-2023-00281 CVE-2023-0296 · GHSA-wpff-vmpr-5q22

Broken or risky cryptographic algorithm in Red Hat OpenShift

Priority LOW 30

The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2023-01-17 Fixed CWE-327
TI-2022-03014 CVE-2022-3262 · GHSA-j37r-c8v9-736q

A flaw was found in Openshift.

Priority LOW 39

A flaw was found in Openshift.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0077 Published 2022-12-08 Will not fix CWE-453
TI-2022-03012 CVE-2022-3260 · GHSA-v9rj-m949-r3xx

Clickjacking in Openshift

Priority MEDIUM 55

The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack..

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00453 Published 2022-12-08 Will not fix CWE-1021
TI-2013-03747 CVE-2013-4281 · GHSA-fqgj-rgfp-3x52

Incorrect default permissions in Red Hat Openshift

Priority LOW 24

In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2022-10-19 No fix listed CWE-276
TI-2013-03723 CVE-2013-4253 · GHSA-cm3c-7ffr-r2cr

Exposure of resource to wrong sphere in Red Hat Openshift

Priority MEDIUM 40

The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00749 Published 2022-10-19 No fix listed CWE-377
TI-2017-05159 CVE-2017-7517 · GHSA-946m-r2cc-x4j3

Improper input validation in Hawkular Metrics

Priority LOW 18

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00563 Published 2022-10-17 No fix listed CWE-20
TI-2021-03001 CVE-2021-4125 · GHSA-jr7q-cc2x-97vj

Improper input validation in kube-reporting/hive

Priority LOW 38

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01523 Published 2022-08-24 Fixed CWE-20
TI-2021-02632 CVE-2021-3697 · GHSA-pr45-j47f-755r

Out-of-bounds write in grub2

Priority LOW 31

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00469 Published 2022-07-06 Partial fix CWE-787
TI-2021-02631 CVE-2021-3696 · GHSA-mv5h-82v3-mq2x

Out-of-bounds write in grub2

Priority LOW 21

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.

CVSS 3.1MEDIUM 4.5 Local Low privileges No interaction EPSS 0.00484 Published 2022-07-06 Partial fix CWE-787
TI-2021-02630 CVE-2021-3695 · GHSA-xjhh-w3rj-8mxm

Out-of-bounds write in grub2

Priority LOW 21

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area.

CVSS 3.1MEDIUM 4.5 Local Low privileges No interaction EPSS 0.00475 Published 2022-07-06 Partial fix CWE-787
TI-2021-02934 CVE-2021-4047 · GHSA-v3g6-gh83-x752

Improper input validation in OpenShift

Priority LOW 35

The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00934 Published 2022-04-11 Fixed CWE-20
TI-2021-02581 CVE-2021-3636 · GHSA-6fcp-x27g-fqqw

Improper certificate validation in openshift

Priority LOW 21

It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates.

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00284 Published 2021-07-30 Partial fix CWE-295
Load more