Every CVE Search/ Get API key

CVE-2019-10150

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host...

5.9 MediumFix available

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
Low

Exploit likelihood

1.39%Down 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.9

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Record
CVE-2019-10150
CVSS 3.0
5.9 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2019-2188 5.9

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Record
EUVD-2019-2188
CVSS 3.0
5.9 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-ccwq-5269-25p2 5.9

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host...

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Record
GHSA-ccwq-5269-25p2
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-287
Updated
2026-11-02
NVD 5.9

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Record
CVE-2019-10150
CVSS 3.0
5.9 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-287
Updated
2026-11-02
OSVRHSA-2019:2989 6.4

Red Hat Security Advisory: OpenShift Container Platform 3.10 atomic-openshift kube-apiserver security update

Record
RHSA-2019:2989
CVSS 3.0
6.4 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2019:3143 5.9

Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift security update

Record
RHSA-2019:3143
CVSS 3.0
5.9 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVRHSA-2019:3811 7.5

Red Hat Security Advisory: OpenShift Container Platform 3.9 atomic-openshift security update

Record
RHSA-2019:3811
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
atomic-openshift
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-clients
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-clients-redistributable
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-docker-excluder
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-excluder
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-hyperkube
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-hypershift
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-master
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-node
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-pod
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
Show 31 moreShow less
Affected packages
PackageAffectedFixed
atomic-openshift-sdn-ovs
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-template-service-broker
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
atomic-openshift-tests
Red Hat:openshift:3.10::el7
 before 0:3.10.175-1.git.0.f9f0e81.el7
0:3.10.175-1.git.0.f9f0e81.el7
cri-o
Red Hat:openshift:3.10::el7
 before 0:1.10.6-2.rhaos3.10.git56d7d9a.el7
0:1.10.6-2.rhaos3.10.git56d7d9a.el7
atomic-openshift
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-clients
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-clients-redistributable
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-docker-excluder
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-excluder
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-hyperkube
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-hypershift
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-master
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-node
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-pod
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-sdn-ovs
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-template-service-broker
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift-tests
Red Hat:openshift:3.11::el7
 before 0:3.11.153-1.git.0.aaf3f71.el7
0:3.11.153-1.git.0.aaf3f71.el7
atomic-openshift
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-clients
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-clients-redistributable
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-cluster-capacity
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-docker-excluder
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-excluder
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-federation-services
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-master
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-node
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-pod
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-sdn-ovs
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-service-catalog
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-template-service-broker
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7
atomic-openshift-tests
Red Hat:openshift:3.9::el7
 before 0:3.9.102-1.git.0.6411f52.el7
0:3.9.102-1.git.0.6411f52.el7

History

History
RecordedChangedSources
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-10150 is a medium vulnerability (CVSS 5.9) in Redhat Openshift Container Platform, published June 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in atomic-openshift 0:3.10.175-1.git.0.f9f0e81.el7.

References

Show 27 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open