TI-2021-03152 CVE-2021-4294 · GHSA-m7qp-cj9p-gj85
OpenShift OSIN CheckClientSecret timing discrepancy
Priority LOW 28
A vulnerability was found in OpenShift OSIN.
Vulnerabilities
7 records
TI-2015-02837 CVE-2015-3207 · GHSA-rqph-25q9-9jhp
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
Priority LOW 25
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
TI-2020-08649 CVE-2020-10752 · GHSA-3cmv-p7jw-h3fg
Insufficiently protected credentials in openshift/openshift-apiserver
Priority LOW 35
A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred.
TI-2013-00130 CVE-2013-0196 · GHSA-2w57-4v2r-38c4
Cross-site request forgery in OpenShift Enterprise
Priority LOW 29
A CSRF issue was found in OpenShift Enterprise 1.2.
TI-2014-00157 CVE-2014-0163 · GHSA-vr5q-rw5h-fh9q
Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.
Priority MEDIUM 42
Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.
TI-2014-00023 CVE-2014-0023 · GHSA-pgmv-hx9g-jjhf
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
Priority LOW 34
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
TI-2015-07358 CVE-2015-8945
openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials…
Priority LOW 23
openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information…