All products

Red Hat OpenShift Container Platform 3.7/atomic-openshift

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Kubernetes DoS VulnerabilityCVE-2019-1002100 · GHSA-Q4RR-64R9-FWGFVersion ranges need review. k8s.io/kubernetesRed Hat OpenShift Container Platform 3.4/atomic-openshift GoRed Hat Medium Fix reported
Kubernetes Arbitrary Command InjectionCVE-2018-1002101 · GHSA-WQWF-X5CJ-RG56Version ranges need review. k8s.io/kubernetesRed Hat OpenShift Container Platform 3.10/atomic-openshift GoRed Hat Medium Fix reported
Denial of service in chain verification in crypto/x509CVE-2018-16875 · GO-2022-0191 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Remote command execution via "go get" with "-u" flag in cmd/goCVE-2018-16873 · GO-2022-0189 toolchainRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Denial of service affecting P-521 and P-384 curves in crypto/ellipticCVE-2019-6486 · GO-2022-0217 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tagCVE-2017-15137 Red Hat OpenShift Container Platform 3.7/atomic-openshift Red Hat Medium No fix reported
atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any projectCVE-2017-15138 Red Hat OpenShift Container Platform 3.2/atomic-openshiftRed Hat OpenShift Container Platform 3.7/atomic-openshift Red Hat Medium No fix reported
web-console: XSS in OAuth server /oauth/token/request endpointCVE-2019-3876 Red Hat OpenShift Container Platform 3.10/atomic-openshiftRed Hat OpenShift Container Platform 3.4/atomic-openshift Red Hat Medium No fix reported
atomic-openshift: cross-namespace owner references can trigger deletions of valid childrenCVE-2019-3884 Red Hat OpenShift Container Platform 3.10/atomic-openshiftRed Hat OpenShift Container Platform 3.11/atomic-openshift Red Hat Low No fix reported
atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repositoryCVE-2019-10150 Red Hat OpenShift Container Platform 3.6/atomic-openshiftRed Hat OpenShift Container Platform 3.7/atomic-openshift Red Hat Medium No fix reported
atomic-openshift: reflected XSS in authentication flowCVE-2019-3889 Red Hat OpenShift Container Platform 3.10/atomic-openshiftRed Hat OpenShift Container Platform 3.4/atomic-openshift Red Hat Medium No fix reported