atomic-openshift vulnerabilities (Red Hat)
133 vulnerabilities.
-
atomic-openshiftRed Hat Symlink Exchange Can Allow Host Filesystem Access 8.8 High -
atomic-openshiftRed Hat Kubernetes man in the middle using LoadBalancer or ExternalIPs 6.3 Medium -
atomic-openshiftRed Hat Docker config secrets leaked when file is malformed and loglevel >= 4 4.7 Medium -
atomic-openshiftRed Hat CRLF injection in urllib3 6.5 Medium -
atomic-openshiftRed Hat A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw... 4.3 Medium -
atomic-openshiftRed Hat Kubernetes node setting allows for neighboring hosts to bypass localhost boundary 5.4 Medium -
atomic-openshiftRed Hat Kubernetes node disk Denial of Service by writing to container /etc/hosts 5.5 Medium -
atomic-openshiftRed Hat Privilege escalation from compromised node to cluster 6.4 Medium -
atomic-openshiftRed Hat Kubernetes kube-controller-manager SSRF 6.3 Medium -
atomic-openshiftRed Hat Kubernetes API Server denial of service vulnerability from malicious YAML payloads 6.5 Medium -
atomic-openshiftRed Hat Kubernetes API server denial of service 5.3 Medium -
atomic-openshiftRed Hat Prototype Pollution in minimist 5.6 Medium -
atomic-openshiftRed Hat GPGME Go wrapper contains Use After Free 7.5 High -
atomic-openshiftRed Hat kubectl cp allows symlink directory traversal 4.8 Medium -
atomic-openshiftRed Hat Insecure Entropy Source - Math.random() in node-uuid 7.5 High -
atomic-openshiftRed Hat Jenkins REST APIs vulnerable to clickjacking 5.4 Medium -
atomic-openshiftRed Hat Memory usage graphs accessible to anyone with Overall/Read 4.3 Medium -
atomic-openshiftRed Hat Jenkins Diagnostic page exposed session cookies 5.4 Medium -
atomic-openshiftRed Hat Non-constant time HMAC comparison 5.3 Medium -
atomic-openshiftRed Hat Non-constant time comparison of inbound TCP agent connection secret 5.3 Medium -
atomic-openshiftRed Hat Jenkins vulnerable to UDP amplification reflection attack 5.8 Medium -
atomic-openshiftRed Hat Inbound TCP Agent Protocol/3 authentication bypass in Jenkins 8.6 High -
atomic-openshiftRed Hat Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints 2.6 Low -
atomic-openshiftRed Hat A flaw was found in cri-o, as a result of all pod-related processes being placed in the same... 5.0 Medium -
atomic-openshiftRed Hat Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack 7.5 High -
atomic-openshiftRed Hat containers/image library Insufficiently Protects Credentials 6.4 Medium -
atomic-openshiftRed Hat Kubernetes client-go logs authorization headers at debug verbosity levels 4.7 Medium -
atomic-openshiftRed Hat kubectl cp allows symlink directory traversal 4.8 Medium -
atomic-openshiftRed Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope 5.0 Medium -
atomic-openshiftRed Hat kubectl cp allows symlink directory traversal 6.4 Medium -
atomic-openshiftRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
atomic-openshiftRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
atomic-openshiftRed Hat A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform... 4.6 Medium -
atomic-openshiftRed Hat It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host... 5.9 Medium -
atomic-openshiftRed Hat Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin 7.5 High -
atomic-openshiftRed Hat golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
atomic-openshiftRed Hat Improper Input Validation in libseccomp-golang 7.5 High -
atomic-openshiftRed Hat kubectl creates world-writeable cached schema files 3.3 Low -
atomic-openshiftRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
atomic-openshiftRed Hat Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability 5.0 Medium -
atomic-openshiftRed Hat kubectl cp path traversal 6.4 Medium -
atomic-openshiftRed Hat Kubernetes DoS Vulnerability 6.5 Medium -
atomic-openshiftRed Hat Withdrawn Advisory: Prometheus XSS Vulnerability 6.1 Medium -
atomic-openshiftRed Hat Jenkins Config File Provider Plugin XSS vulnerability 4.8 Medium -
atomic-openshiftRed Hat Cross-site Scripting in Jenkins Blue Ocean Plugin 5.4 Medium -
atomic-openshiftRed Hat Cross-Site Request Forgery in Jenkins Blue Ocean Plugin 6.5 Medium -
atomic-openshiftRed Hat Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS 8.1 High -
atomic-openshiftRed Hat Cross-Site Request Forgery in Jenkins Git Plugin 4.3 Medium -
atomic-openshiftRed Hat Improper Limitation of a Pathname to a Restricted Directory in Jenkins 6.5 Medium -
atomic-openshiftRed Hat Improper Authorization in Jenkins Core 7.2 High - Show olderLoading…