atomic-openshift-hyperkube vulnerabilities (Red Hat)

71 vulnerabilities.

• atomic-openshift-hyperkube Red Hat Symlink Exchange Can Allow Host Filesystem Access CVE-2021-25741 Public exploitFix available 8.8 HighSeptember 20, 2021
• atomic-openshift-hyperkube Red Hat Kubernetes man in the middle using LoadBalancer or ExternalIPs CVE-2020-8554 Public exploitFix available 6.3 MediumJanuary 21, 2021
• atomic-openshift-hyperkube Red Hat Docker config secrets leaked when file is malformed and loglevel >= 4 CVE-2020-8564 Fix available 4.7 MediumDecember 7, 2020
• atomic-openshift-hyperkube Red Hat CRLF injection in urllib3 CVE-2020-26137 Fix available 6.5 MediumSeptember 29, 2020
• atomic-openshift-hyperkube Red Hat A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw... CVE-2020-10715 4.3 MediumSeptember 16, 2020
• atomic-openshift-hyperkube Red Hat Kubernetes node setting allows for neighboring hosts to bypass localhost boundary CVE-2020-8558 Public exploitFix available 5.4 MediumJuly 27, 2020
• atomic-openshift-hyperkube Red Hat Kubernetes node disk Denial of Service by writing to container /etc/hosts CVE-2020-8557 Fix available 5.5 MediumJuly 23, 2020
• atomic-openshift-hyperkube Red Hat Privilege escalation from compromised node to cluster CVE-2020-8559 Public exploitFix available 6.4 MediumJuly 22, 2020
• atomic-openshift-hyperkube Red Hat Kubernetes kube-controller-manager SSRF CVE-2020-8555 Fix available 6.3 MediumJune 4, 2020
• atomic-openshift-hyperkube Red Hat Kubernetes API Server denial of service vulnerability from malicious YAML payloads CVE-2019-11254 Fix available 6.5 MediumApril 1, 2020
• atomic-openshift-hyperkube Red Hat Kubernetes API server denial of service CVE-2020-8552 Fix available 5.3 MediumMarch 27, 2020
• atomic-openshift-hyperkube Red Hat Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020
• atomic-openshift-hyperkube Red Hat GPGME Go wrapper contains Use After Free CVE-2020-8945 Fix available 7.5 HighFebruary 12, 2020
• atomic-openshift-hyperkube Red Hat kubectl cp allows symlink directory traversal CVE-2019-11251 Fix available 4.8 MediumFebruary 3, 2020
• atomic-openshift-hyperkube Red Hat Jenkins REST APIs vulnerable to clickjacking CVE-2020-2105 Fix available 5.4 MediumJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Memory usage graphs accessible to anyone with Overall/Read CVE-2020-2104 Fix available 4.3 MediumJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Jenkins Diagnostic page exposed session cookies CVE-2020-2103 Fix available 5.4 MediumJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Non-constant time HMAC comparison CVE-2020-2102 Fix available 5.3 MediumJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Non-constant time comparison of inbound TCP agent connection secret CVE-2020-2101 Fix available 5.3 MediumJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Jenkins vulnerable to UDP amplification reflection attack CVE-2020-2100 Fix available 5.8 MediumJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Inbound TCP Agent Protocol/3 authentication bypass in Jenkins CVE-2020-2099 Fix available 8.6 HighJanuary 29, 2020
• atomic-openshift-hyperkube Red Hat Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints CVE-2018-1002102 Fix available 2.6 LowDecember 5, 2019
• atomic-openshift-hyperkube Red Hat A flaw was found in cri-o, as a result of all pod-related processes being placed in the same... CVE-2019-14891 Fix available 5.0 MediumNovember 25, 2019
• atomic-openshift-hyperkube Red Hat Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack CVE-2019-11253 Fix available EPSS 25.9% 7.5 HighOctober 17, 2019
• atomic-openshift-hyperkube Red Hat containers/image library Insufficiently Protects Credentials CVE-2019-10214 Fix available 6.4 MediumSeptember 10, 2019
• atomic-openshift-hyperkube Red Hat Kubernetes client-go logs authorization headers at debug verbosity levels CVE-2019-11250 Fix available 4.7 MediumAugust 29, 2019
• atomic-openshift-hyperkube Red Hat kubectl cp allows symlink directory traversal CVE-2019-11249 Fix available 4.8 MediumAugust 29, 2019
• atomic-openshift-hyperkube Red Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope CVE-2019-11247 Fix available 5.0 MediumAugust 29, 2019
• atomic-openshift-hyperkube Red Hat kubectl cp allows symlink directory traversal CVE-2019-11246 Fix available 6.4 MediumAugust 29, 2019
• atomic-openshift-hyperkube Red Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• atomic-openshift-hyperkube Red Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service CVE-2019-9512 Fix available EPSS 83.4% 7.5 HighAugust 13, 2019
• atomic-openshift-hyperkube Red Hat A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform... CVE-2019-3889 Fix available 4.6 MediumJuly 11, 2019
• atomic-openshift-hyperkube Red Hat It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host... CVE-2019-10150 Fix available 5.9 MediumJune 12, 2019
• atomic-openshift-hyperkube Red Hat Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin CVE-2019-10337 Fix available 7.5 HighJune 11, 2019
• atomic-openshift-hyperkube Red Hat golang.org/x/crypto/salsa20/salsa uses insufficiently random values CVE-2019-11840 Fix available 5.9 MediumMay 9, 2019
• atomic-openshift-hyperkube Red Hat Improper Input Validation in libseccomp-golang CVE-2017-18367 Fix available 7.5 HighApril 24, 2019
• atomic-openshift-hyperkube Red Hat kubectl creates world-writeable cached schema files CVE-2019-11244 Fix available 3.3 LowApril 22, 2019
• atomic-openshift-hyperkube Red Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• atomic-openshift-hyperkube Red Hat Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability CVE-2019-3876 5.0 MediumApril 1, 2019
• atomic-openshift-hyperkube Red Hat kubectl cp path traversal CVE-2019-1002101 Public exploitFix available EPSS 12.8% 6.4 MediumApril 1, 2019
• atomic-openshift-hyperkube Red Hat Kubernetes DoS Vulnerability CVE-2019-1002100 Fix available EPSS 16.9% 6.5 MediumApril 1, 2019
• atomic-openshift-hyperkube Red Hat Withdrawn Advisory: Prometheus XSS Vulnerability CVE-2019-3826 Fix available 6.1 MediumMarch 26, 2019
• atomic-openshift-hyperkube Red Hat Jenkins Config File Provider Plugin XSS vulnerability CVE-2019-1003014 Fix available 4.8 MediumFebruary 6, 2019
• atomic-openshift-hyperkube Red Hat Cross-site Scripting in Jenkins Blue Ocean Plugin CVE-2019-1003013 Fix available 5.4 MediumFebruary 6, 2019
• atomic-openshift-hyperkube Red Hat Cross-Site Request Forgery in Jenkins Blue Ocean Plugin CVE-2019-1003012 Fix available 6.5 MediumFebruary 6, 2019
• atomic-openshift-hyperkube Red Hat Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS CVE-2019-1003011 Fix available 8.1 HighFebruary 6, 2019
• atomic-openshift-hyperkube Red Hat Cross-Site Request Forgery in Jenkins Git Plugin CVE-2019-1003010 Fix available 4.3 MediumFebruary 6, 2019
• atomic-openshift-hyperkube Red Hat Improper Limitation of a Pathname to a Restricted Directory in Jenkins CVE-2018-1000997 Fix available 6.5 MediumJanuary 23, 2019
• atomic-openshift-hyperkube Red Hat Improper Authorization in Jenkins Core CVE-2019-1003004 Fix available 7.2 HighJanuary 22, 2019
• atomic-openshift-hyperkube Red Hat Improper Authorization in Jenkins Core CVE-2019-1003003 Fix available 7.2 HighJanuary 22, 2019
• Show olderLoading…