atomic-openshift-web-console vulnerabilities (Red Hat)
61 vulnerabilities.
-
atomic-openshift-web-consoleRed Hat Kubernetes man in the middle using LoadBalancer or ExternalIPs 6.3 Medium -
atomic-openshift-web-consoleRed Hat CRLF injection in urllib3 6.5 Medium -
atomic-openshift-web-consoleRed Hat A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw... 4.3 Medium -
atomic-openshift-web-consoleRed Hat Kubernetes node setting allows for neighboring hosts to bypass localhost boundary 5.4 Medium -
atomic-openshift-web-consoleRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
atomic-openshift-web-consoleRed Hat Kubernetes API server denial of service 5.3 Medium -
atomic-openshift-web-consoleRed Hat Prototype Pollution in minimist 5.6 Medium -
atomic-openshift-web-consoleRed Hat GPGME Go wrapper contains Use After Free 7.5 High -
atomic-openshift-web-consoleRed Hat Jenkins REST APIs vulnerable to clickjacking 5.4 Medium -
atomic-openshift-web-consoleRed Hat Memory usage graphs accessible to anyone with Overall/Read 4.3 Medium -
atomic-openshift-web-consoleRed Hat Jenkins Diagnostic page exposed session cookies 5.4 Medium -
atomic-openshift-web-consoleRed Hat Non-constant time HMAC comparison 5.3 Medium -
atomic-openshift-web-consoleRed Hat Non-constant time comparison of inbound TCP agent connection secret 5.3 Medium -
atomic-openshift-web-consoleRed Hat Jenkins vulnerable to UDP amplification reflection attack 5.8 Medium -
atomic-openshift-web-consoleRed Hat Inbound TCP Agent Protocol/3 authentication bypass in Jenkins 8.6 High -
atomic-openshift-web-consoleRed Hat A flaw was found in cri-o, as a result of all pod-related processes being placed in the same... 5.0 Medium -
atomic-openshift-web-consoleRed Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope 5.0 Medium -
atomic-openshift-web-consoleRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
atomic-openshift-web-consoleRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
atomic-openshift-web-consoleRed Hat Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin 9.9 Critical -
atomic-openshift-web-consoleRed Hat Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin 4.3 Medium -
atomic-openshift-web-consoleRed Hat golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
atomic-openshift-web-consoleRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
atomic-openshift-web-consoleRed Hat Improper Neutralization of Input During Web Page Generation in Jenkins 5.4 Medium -
atomic-openshift-web-consoleRed Hat Insufficient Session Expiration in Jenkins 8.1 High -
atomic-openshift-web-consoleRed Hat kubectl cp path traversal 6.4 Medium -
atomic-openshift-web-consoleRed Hat Withdrawn Advisory: Prometheus XSS Vulnerability 6.1 Medium -
atomic-openshift-web-consoleRed Hat Jenkins Config File Provider Plugin XSS vulnerability 4.8 Medium -
atomic-openshift-web-consoleRed Hat Cross-site Scripting in Jenkins Blue Ocean Plugin 5.4 Medium -
atomic-openshift-web-consoleRed Hat Cross-Site Request Forgery in Jenkins Blue Ocean Plugin 6.5 Medium -
atomic-openshift-web-consoleRed Hat Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS 8.1 High -
atomic-openshift-web-consoleRed Hat Cross-Site Request Forgery in Jenkins Git Plugin 4.3 Medium -
atomic-openshift-web-consoleRed Hat Improper Limitation of a Pathname to a Restricted Directory in Jenkins 6.5 Medium -
atomic-openshift-web-consoleRed Hat Improper Authorization in Jenkins Core 7.2 High -
atomic-openshift-web-consoleRed Hat Improper Authorization in Jenkins Core 7.2 High -
atomic-openshift-web-consoleRed Hat Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability 8.8 High -
atomic-openshift-web-consoleRed Hat Jenkins Groovy Plugin sandbox bypass vulnerability 8.8 High -
atomic-openshift-web-consoleRed Hat Protection Mechanism Failure in Jenkins Script Security Plugin 8.8 High -
atomic-openshift-web-consoleRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 7.8 High -
atomic-openshift-web-consoleRed Hat Session Fixation in Jenkins 5.4 Medium -
atomic-openshift-web-consoleRed Hat Improper Authorization in Jenkins 6.5 Medium -
atomic-openshift-web-consoleRed Hat Cross-site Scripting in Jenkins 6.1 Medium -
atomic-openshift-web-consoleRed Hat Path Traversal in Jenkins 6.5 Medium -
atomic-openshift-web-consoleRed Hat xterm vulnerable to remote code execution 8.8 High -
atomic-openshift-web-consoleRed Hat An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1... 7.5 High -
atomic-openshift-web-consoleRed Hat Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console... 9.8 Critical -
atomic-openshift-web-consoleRed Hat An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,... 7.5 High -
atomic-openshift-web-consoleRed Hat An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8... 7.5 High -
atomic-openshift-web-consoleRed Hat Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass 8.8 High -
atomic-openshift-web-consoleRed Hat Improper Privilege Management in Jenkins 8.8 High - Show olderLoading…