atomic-openshift-metrics-server vulnerabilities (Red Hat)
46 vulnerabilities.
-
atomic-openshift-metrics-serverRed Hat Kubernetes man in the middle using LoadBalancer or ExternalIPs 6.3 Medium -
atomic-openshift-metrics-serverRed Hat CRLF injection in urllib3 6.5 Medium -
atomic-openshift-metrics-serverRed Hat Improper masking of some secrets in Jenkins Credentials Binding Plugin 4.3 Medium -
atomic-openshift-metrics-serverRed Hat Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps 6.5 Medium -
atomic-openshift-metrics-serverRed Hat Kubernetes API server denial of service 5.3 Medium -
atomic-openshift-metrics-serverRed Hat Jenkins REST APIs vulnerable to clickjacking 5.4 Medium -
atomic-openshift-metrics-serverRed Hat Memory usage graphs accessible to anyone with Overall/Read 4.3 Medium -
atomic-openshift-metrics-serverRed Hat Jenkins Diagnostic page exposed session cookies 5.4 Medium -
atomic-openshift-metrics-serverRed Hat Non-constant time HMAC comparison 5.3 Medium -
atomic-openshift-metrics-serverRed Hat Non-constant time comparison of inbound TCP agent connection secret 5.3 Medium -
atomic-openshift-metrics-serverRed Hat Jenkins vulnerable to UDP amplification reflection attack 5.8 Medium -
atomic-openshift-metrics-serverRed Hat Inbound TCP Agent Protocol/3 authentication bypass in Jenkins 8.6 High -
atomic-openshift-metrics-serverRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
atomic-openshift-metrics-serverRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
atomic-openshift-metrics-serverRed Hat Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin 9.9 Critical -
atomic-openshift-metrics-serverRed Hat Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin 4.3 Medium -
atomic-openshift-metrics-serverRed Hat golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
atomic-openshift-metrics-serverRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
atomic-openshift-metrics-serverRed Hat Improper Neutralization of Input During Web Page Generation in Jenkins 5.4 Medium -
atomic-openshift-metrics-serverRed Hat Insufficient Session Expiration in Jenkins 8.1 High -
atomic-openshift-metrics-serverRed Hat kubectl cp path traversal 6.4 Medium -
atomic-openshift-metrics-serverRed Hat Withdrawn Advisory: Prometheus XSS Vulnerability 6.1 Medium -
atomic-openshift-metrics-serverRed Hat Jenkins Config File Provider Plugin XSS vulnerability 4.8 Medium -
atomic-openshift-metrics-serverRed Hat Cross-site Scripting in Jenkins Blue Ocean Plugin 5.4 Medium -
atomic-openshift-metrics-serverRed Hat Cross-Site Request Forgery in Jenkins Blue Ocean Plugin 6.5 Medium -
atomic-openshift-metrics-serverRed Hat Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS 8.1 High -
atomic-openshift-metrics-serverRed Hat Cross-Site Request Forgery in Jenkins Git Plugin 4.3 Medium -
atomic-openshift-metrics-serverRed Hat Improper Limitation of a Pathname to a Restricted Directory in Jenkins 6.5 Medium -
atomic-openshift-metrics-serverRed Hat Improper Authorization in Jenkins Core 7.2 High -
atomic-openshift-metrics-serverRed Hat Improper Authorization in Jenkins Core 7.2 High -
atomic-openshift-metrics-serverRed Hat Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability 8.8 High -
atomic-openshift-metrics-serverRed Hat Jenkins Groovy Plugin sandbox bypass vulnerability 8.8 High -
atomic-openshift-metrics-serverRed Hat Protection Mechanism Failure in Jenkins Script Security Plugin 8.8 High -
atomic-openshift-metrics-serverRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 7.8 High -
atomic-openshift-metrics-serverRed Hat Session Fixation in Jenkins 5.4 Medium -
atomic-openshift-metrics-serverRed Hat Improper Authorization in Jenkins 6.5 Medium -
atomic-openshift-metrics-serverRed Hat Cross-site Scripting in Jenkins 6.1 Medium -
atomic-openshift-metrics-serverRed Hat Path Traversal in Jenkins 6.5 Medium -
atomic-openshift-metrics-serverRed Hat An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1... 7.5 High -
atomic-openshift-metrics-serverRed Hat Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console... 9.8 Critical -
atomic-openshift-metrics-serverRed Hat An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,... 7.5 High -
atomic-openshift-metrics-serverRed Hat An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8... 7.5 High -
atomic-openshift-metrics-serverRed Hat Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass 8.8 High -
atomic-openshift-metrics-serverRed Hat Improper Privilege Management in Jenkins 8.8 High -
atomic-openshift-metrics-serverRed Hat Missing Release of Resource after Effective Lifetime in Jenkins 7.5 High -
atomic-openshift-metrics-serverRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 5.3 Medium