openshift vulnerabilities (Red Hat)
267 vulnerabilities.
openshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins7.5 HighopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.1 HighopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticalopenshiftRed Hatcoreos-installer improperly verifies GPG signature when decompressing gzipped artifact7.8 HighopenshiftRed HatStored XSS vulnerability in Jenkins Git Plugin6.1 MediumopenshiftRed Hatgolang.org/x/text/language Out-of-bounds Read vulnerability7.5 HighopenshiftRed HatSymlink Exchange Can Allow Host Filesystem Access8.8 HighopenshiftRed HatHoles in EndpointSlice Validation Enable Host Network Hijack2.7 LowopenshiftRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumopenshiftRed HatGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighopenshiftRed HatIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...4.6 MediumopenshiftRed HatOpen vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in...5.5 MediumopenshiftRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumopenshiftRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighopenshiftRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumopenshiftRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighopenshiftRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighopenshiftRed HatSessionListener can prevent a session from being invalidated breaking logout2.9 LowopenshiftRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations5.3 MediumopenshiftRed HatValidating Admission Webhook does not observe some previous fields6.5 MediumopenshiftRed Hatgolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 MediumopenshiftRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighopenshiftRed HatCross-Site Request Forgery in Jenkins Credentials Plugin6.1 MediumopenshiftRed HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 MediumopenshiftRed HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 MediumopenshiftRed HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 MediumopenshiftRed HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 MediumopenshiftRed HatXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 HighopenshiftRed HatDenial of service in gopkg.in/yaml.v25.5 MediumopenshiftRed HatView name validation bypass in Jenkins4.3 MediumopenshiftRed HatLack of type validation in agent related REST API in Jenkins4.3 MediumopenshiftRed HatImproper Locking in github.com/containers/storage6.5 MediumopenshiftRed HatIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items6.5 MediumopenshiftRed HatTime-of-check Time-of-use (TOCTOU) Race Condition in Jenkins5.3 MediumopenshiftRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumopenshiftRed HatStored XSS vulnerability in Jenkins on new item page5.4 MediumopenshiftRed HatReflected XSS vulnerability in Jenkins markup formatter preview6.1 MediumopenshiftRed HatMissing permission check for paths with specific prefix in Jenkins5.3 MediumopenshiftRed HatStored XSS vulnerability in Jenkins button labels5.4 MediumopenshiftRed HatExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 MediumopenshiftRed HatArbitrary file existence check in file fingerprints in Jenkins4.3 MediumopenshiftRed HatPath traversal vulnerability in Jenkins agent names8.0 HighopenshiftRed HatImproper handling of REST API XML deserialization errors in Jenkins8.0 HighopenshiftRed HatXSS vulnerability in Jenkins notification bar5.4 Medium- Show moreLoading…