atomic-openshift-utils vulnerabilities (Red Hat)

51 vulnerabilities.

• atomic-openshift-utils Red Hat kubectl cp path traversal CVE-2019-1002101 Public exploitFix available EPSS 12.8% 6.4 MediumApril 1, 2019
• atomic-openshift-utils Red Hat Privilege Escalation in Kubernetes CVE-2018-1002105 Public exploitFix available EPSS 87.0% 9.8 CriticalDecember 5, 2018
• atomic-openshift-utils Red Hat A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An... CVE-2018-14645 Fix available 7.5 HighSeptember 21, 2018
• atomic-openshift-utils Red Hat JSON-Patch Out-of-bounds Write vulnerability CVE-2018-14632 Fix available 7.7 HighSeptember 6, 2018
• atomic-openshift-utils Red Hat The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker... CVE-2017-15138 5.0 MediumAugust 13, 2018
• atomic-openshift-utils Red Hat A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin.... CVE-2017-12195 Fix available 6.5 MediumJuly 27, 2018
• atomic-openshift-utils Red Hat The OpenShift image import whitelist failed to enforce restrictions correctly when running... CVE-2017-15137 4.3 MediumJuly 16, 2018
• atomic-openshift-utils Red Hat source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53... CVE-2018-10843 8.5 HighJuly 2, 2018
• atomic-openshift-utils Red Hat openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes... CVE-2018-1085 9.0 CriticalJune 15, 2018
• atomic-openshift-utils Red Hat routing before version 3.10 is vulnerable to an improper input validation of the Openshift... CVE-2018-1070 6.5 MediumJune 12, 2018
• atomic-openshift-utils Red Hat Kubernetes arbitrary file overwrite CVE-2018-1002100 Fix available 4.2 MediumJune 1, 2018
• atomic-openshift-utils Red Hat Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270)... CVE-2018-1000400 8.8 HighMay 18, 2018
• atomic-openshift-utils Red Hat A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An... CVE-2018-1102 Fix available 8.8 HighApril 30, 2018
• atomic-openshift-utils Red Hat Ansible Arbitrary Code Execution CVE-2017-7466 Fix available 8.0 HighNovember 17, 2017
• atomic-openshift-utils Red Hat Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems CVE-2016-9587 Public exploitFix available EPSS 17.0% 6.6 MediumNovember 10, 2017
• atomic-openshift-utils Red Hat Ansible fails to properly sanitize fact variables sent from the Ansible controller CVE-2016-8628 Fix available 7.6 HighNovember 10, 2017
• atomic-openshift-utils Red Hat Ansible fails to properly mark lookup-plugin results as unsafe CVE-2017-7481 Fix available 5.3 MediumJune 10, 2017
• atomic-openshift-utils Red Hat The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non... CVE-2016-5418 Fix available 7.5 HighSeptember 21, 2016
• atomic-openshift-utils Red Hat Authorization bypass in Openshift CVE-2016-1906 Fix available 9.8 CriticalFebruary 3, 2016
• atomic-openshift-utils Red Hat Access Restriction Bypass in kubernetes CVE-2016-1905 Fix available 7.7 HighFebruary 3, 2016
• atomic-openshift-utils Red Hat Jenkins does not Verify Checksums for Plugin Files CVE-2015-7539 Fix available 7.5 HighFebruary 3, 2016
• atomic-openshift-utils Red Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack CVE-2015-7538 Fix available 8.8 HighFebruary 3, 2016
• atomic-openshift-utils Red Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack CVE-2015-7537 Fix available 8.8 HighFebruary 3, 2016
• atomic-openshift-utils Red Hat Jenkins CLI Deserialization of Untrusted Data vulnerability CVE-2015-8103 Public exploitFix available EPSS 91.9% 9.8 CriticalNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins allows Cross-Site Scripting (XSS) CVE-2015-5326 Fix available 4.3 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins allows Bypass of Access Restrictions CVE-2015-5325 Fix available 7.5 HighNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins allows Unauthorized Viewing of Queue API Information CVE-2015-5324 Fix available 5.0 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins allows Administrators to Access API Tokens CVE-2015-5323 Fix available 6.5 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins has Local File Inclusion Vulnerability CVE-2015-5322 Fix available 5.0 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins has Information Disclosure via Sidepanel Widget CVE-2015-5321 Fix available 5.0 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor CVE-2015-5320 Fix available 5.0 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI CVE-2015-5319 Fix available 5.0 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack CVE-2015-5318 Fix available 6.8 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins discloses project names via fingerprints CVE-2015-5317 In KEVFix available EPSS 23.0% 5.0 MediumNovember 25, 2015
• atomic-openshift-utils Red Hat Jenkins allows for Privilege Escalation by Remote Authenticated Users CVE-2015-1814 Fix available 7.5 HighOctober 16, 2015
• atomic-openshift-utils Red Hat Jenkins allows Cross-Site Scripting (XSS) CVE-2015-1813 Fix available 4.3 MediumOctober 16, 2015
• atomic-openshift-utils Red Hat Jenkins Cross-site Scripting vulnerability CVE-2015-1812 Fix available 4.3 MediumOctober 16, 2015
• atomic-openshift-utils Red Hat Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation CVE-2015-1810 Fix available 4.6 MediumOctober 16, 2015
• atomic-openshift-utils Red Hat Jenkins Vulnerable to Denial of Service (DoS) CVE-2015-1808 Fix available 3.5 LowOctober 16, 2015
• atomic-openshift-utils Red Hat Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote... CVE-2015-1807 3.5 LowOctober 16, 2015
• atomic-openshift-utils Red Hat Jenkins allows for Privilege Escalation by Remote Authenticated Users CVE-2015-1806 Fix available 6.5 MediumOctober 16, 2015
• atomic-openshift-utils Red Hat Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3680 Fix available 4.0 MediumOctober 16, 2014
• atomic-openshift-utils Red Hat Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code CVE-2014-3667 Fix available 4.0 MediumOctober 16, 2014
• atomic-openshift-utils Red Hat Jenkins allows for Code Execution via Crafted Packet to the CLI CVE-2014-3666 Fix available 7.5 HighOctober 16, 2014
• atomic-openshift-utils Red Hat Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs CVE-2014-3663 Fix available 6.0 MediumOctober 16, 2014
• atomic-openshift-utils Red Hat Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3662 Fix available 5.0 MediumOctober 16, 2014
• atomic-openshift-utils Red Hat Jenkins Denial of Service vulnerability CVE-2014-3661 Fix available 5.0 MediumOctober 16, 2014
• atomic-openshift-utils Red Hat Jenkins Cross-site Scripting vulnerability CVE-2014-3681 Fix available 4.3 MediumOctober 15, 2014
• atomic-openshift-utils Red Hat Jenkins Path Traversal vulnerability CVE-2014-3664 Fix available 4.0 MediumOctober 15, 2014
• atomic-openshift-utils Red Hat Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before... CVE-2014-1869 4.3 MediumFebruary 8, 2014
• Show olderLoading…