openshift-ansible vulnerabilities (Red Hat)
206 vulnerabilities.
openshift-ansibleRed HatMissing Release of Resource after Effective Lifetime in Jenkins7.5 Highopenshift-ansibleRed HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 Mediumopenshift-ansibleRed HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 Mediumopenshift-ansibleRed HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 Mediumopenshift-ansibleRed Hatsource-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53...8.5 Highopenshift-ansibleRed Hatopenshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes...9.0 Criticalopenshift-ansibleRed Hatrouting before version 3.10 is vulnerable to an improper input validation of the Openshift...6.5 Mediumopenshift-ansibleRed HatKubernetes arbitrary file overwrite4.2 Mediumopenshift-ansibleRed HatKubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270)...8.8 Highopenshift-ansibleRed HatA flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An...8.8 Highopenshift-ansibleRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 Mediumopenshift-ansibleRed HatAnsible Arbitrary Code Execution8.0 Highopenshift-ansibleRed HatAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumopenshift-ansibleRed HatAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highopenshift-ansibleRed HatAnsible fails to properly mark lookup-plugin results as unsafe5.3 Mediumopenshift-ansibleRed HatThe sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non...7.5 Highopenshift-ansibleRed HatAuthorization bypass in Openshift9.8 Criticalopenshift-ansibleRed HatAccess Restriction Bypass in kubernetes7.7 Highopenshift-ansibleRed HatJenkins does not Verify Checksums for Plugin Files7.5 Highopenshift-ansibleRed HatJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack8.8 Highopenshift-ansibleRed HatJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack8.8 Highopenshift-ansibleRed HatJenkins CLI Deserialization of Untrusted Data vulnerability9.8 Criticalopenshift-ansibleRed HatJenkins allows Cross-Site Scripting (XSS)4.3 Mediumopenshift-ansibleRed HatJenkins allows Bypass of Access Restrictions7.5 Highopenshift-ansibleRed HatJenkins allows Unauthorized Viewing of Queue API Information5.0 Mediumopenshift-ansibleRed HatJenkins allows Administrators to Access API Tokens6.5 Mediumopenshift-ansibleRed HatJenkins has Local File Inclusion Vulnerability5.0 Mediumopenshift-ansibleRed HatJenkins has Information Disclosure via Sidepanel Widget5.0 Mediumopenshift-ansibleRed HatJenkins allows Exposure of Sensitive Information to an Unauthorized Actor5.0 Mediumopenshift-ansibleRed HatJenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI5.0 Mediumopenshift-ansibleRed HatJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack6.8 Mediumopenshift-ansibleRed HatJenkins discloses project names via fingerprints5.0 Mediumopenshift-ansibleRed HatJenkins allows for Privilege Escalation by Remote Authenticated Users7.5 Highopenshift-ansibleRed HatJenkins allows Cross-Site Scripting (XSS)4.3 Mediumopenshift-ansibleRed HatJenkins Cross-site Scripting vulnerability4.3 Mediumopenshift-ansibleRed HatJenkins does not Restrict Reserved Names Allowing for Privilege Escalation4.6 Mediumopenshift-ansibleRed HatJenkins Vulnerable to Denial of Service (DoS)3.5 Lowopenshift-ansibleRed HatDirectory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote...3.5 Lowopenshift-ansibleRed HatJenkins allows for Privilege Escalation by Remote Authenticated Users6.5 Mediumopenshift-ansibleRed HatJenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability4.0 Mediumopenshift-ansibleRed HatJenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code4.0 Mediumopenshift-ansibleRed HatJenkins allows for Code Execution via Crafted Packet to the CLI7.5 Highopenshift-ansibleRed HatJenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs6.0 Mediumopenshift-ansibleRed HatJenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability5.0 Mediumopenshift-ansibleRed HatJenkins Denial of Service vulnerability5.0 Mediumopenshift-ansibleRed HatJenkins Cross-site Scripting vulnerability4.3 Mediumopenshift-ansibleRed HatJenkins Path Traversal vulnerability4.0 Mediumopenshift-ansibleRed HatMultiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before...4.3 Mediumopenshift-ansibleRed HatArbitrary file write in Apache Commons Fileupload7.5 High