atomic-openshift-hypershift vulnerabilities (Red Hat)
71 vulnerabilities.
-
atomic-openshift-hypershiftRed Hat Symlink Exchange Can Allow Host Filesystem Access 8.8 High -
atomic-openshift-hypershiftRed Hat Kubernetes man in the middle using LoadBalancer or ExternalIPs 6.3 Medium -
atomic-openshift-hypershiftRed Hat Docker config secrets leaked when file is malformed and loglevel >= 4 4.7 Medium -
atomic-openshift-hypershiftRed Hat CRLF injection in urllib3 6.5 Medium -
atomic-openshift-hypershiftRed Hat A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw... 4.3 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes node setting allows for neighboring hosts to bypass localhost boundary 5.4 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes node disk Denial of Service by writing to container /etc/hosts 5.5 Medium -
atomic-openshift-hypershiftRed Hat Privilege escalation from compromised node to cluster 6.4 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes kube-controller-manager SSRF 6.3 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes API Server denial of service vulnerability from malicious YAML payloads 6.5 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes API server denial of service 5.3 Medium -
atomic-openshift-hypershiftRed Hat Prototype Pollution in minimist 5.6 Medium -
atomic-openshift-hypershiftRed Hat GPGME Go wrapper contains Use After Free 7.5 High -
atomic-openshift-hypershiftRed Hat kubectl cp allows symlink directory traversal 4.8 Medium -
atomic-openshift-hypershiftRed Hat Jenkins REST APIs vulnerable to clickjacking 5.4 Medium -
atomic-openshift-hypershiftRed Hat Memory usage graphs accessible to anyone with Overall/Read 4.3 Medium -
atomic-openshift-hypershiftRed Hat Jenkins Diagnostic page exposed session cookies 5.4 Medium -
atomic-openshift-hypershiftRed Hat Non-constant time HMAC comparison 5.3 Medium -
atomic-openshift-hypershiftRed Hat Non-constant time comparison of inbound TCP agent connection secret 5.3 Medium -
atomic-openshift-hypershiftRed Hat Jenkins vulnerable to UDP amplification reflection attack 5.8 Medium -
atomic-openshift-hypershiftRed Hat Inbound TCP Agent Protocol/3 authentication bypass in Jenkins 8.6 High -
atomic-openshift-hypershiftRed Hat Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints 2.6 Low -
atomic-openshift-hypershiftRed Hat A flaw was found in cri-o, as a result of all pod-related processes being placed in the same... 5.0 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack 7.5 High -
atomic-openshift-hypershiftRed Hat containers/image library Insufficiently Protects Credentials 6.4 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes client-go logs authorization headers at debug verbosity levels 4.7 Medium -
atomic-openshift-hypershiftRed Hat kubectl cp allows symlink directory traversal 4.8 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope 5.0 Medium -
atomic-openshift-hypershiftRed Hat kubectl cp allows symlink directory traversal 6.4 Medium -
atomic-openshift-hypershiftRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
atomic-openshift-hypershiftRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
atomic-openshift-hypershiftRed Hat A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform... 4.6 Medium -
atomic-openshift-hypershiftRed Hat It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host... 5.9 Medium -
atomic-openshift-hypershiftRed Hat Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin 7.5 High -
atomic-openshift-hypershiftRed Hat golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
atomic-openshift-hypershiftRed Hat Improper Input Validation in libseccomp-golang 7.5 High -
atomic-openshift-hypershiftRed Hat kubectl creates world-writeable cached schema files 3.3 Low -
atomic-openshift-hypershiftRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
atomic-openshift-hypershiftRed Hat Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability 5.0 Medium -
atomic-openshift-hypershiftRed Hat kubectl cp path traversal 6.4 Medium -
atomic-openshift-hypershiftRed Hat Kubernetes DoS Vulnerability 6.5 Medium -
atomic-openshift-hypershiftRed Hat Withdrawn Advisory: Prometheus XSS Vulnerability 6.1 Medium -
atomic-openshift-hypershiftRed Hat Jenkins Config File Provider Plugin XSS vulnerability 4.8 Medium -
atomic-openshift-hypershiftRed Hat Cross-site Scripting in Jenkins Blue Ocean Plugin 5.4 Medium -
atomic-openshift-hypershiftRed Hat Cross-Site Request Forgery in Jenkins Blue Ocean Plugin 6.5 Medium -
atomic-openshift-hypershiftRed Hat Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS 8.1 High -
atomic-openshift-hypershiftRed Hat Cross-Site Request Forgery in Jenkins Git Plugin 4.3 Medium -
atomic-openshift-hypershiftRed Hat Improper Limitation of a Pathname to a Restricted Directory in Jenkins 6.5 Medium -
atomic-openshift-hypershiftRed Hat Improper Authorization in Jenkins Core 7.2 High -
atomic-openshift-hypershiftRed Hat Improper Authorization in Jenkins Core 7.2 High - Show olderLoading…