rubygem-openshift-origin-console vulnerabilities (Red Hat)
53 vulnerabilities.
-
rubygem-openshift-origin-consoleRed Hat The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a... 9.8 Critical -
rubygem-openshift-origin-consoleRed Hat XML external entity (XXE) vulnerability in Jenkins 7.5 High -
rubygem-openshift-origin-consoleRed Hat XML external entity (XXE) vulnerability in Jenkins 7.5 High -
rubygem-openshift-origin-consoleRed Hat A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic... 6.5 Medium -
rubygem-openshift-origin-consoleRed Hat mcollective has a default password set at install 9.8 Critical -
rubygem-openshift-origin-consoleRed Hat openshift-origin-node Improper Input Validation vulnerability 5.5 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins does not Verify Checksums for Plugin Files 7.5 High -
rubygem-openshift-origin-consoleRed Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack 8.8 High -
rubygem-openshift-origin-consoleRed Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack 8.8 High -
rubygem-openshift-origin-consoleRed Hat Improper Input Validation in Apache ActiveMQ 9.8 Critical -
rubygem-openshift-origin-consoleRed Hat Jenkins CLI Deserialization of Untrusted Data vulnerability 9.8 Critical -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Cross-Site Scripting (XSS) 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Bypass of Access Restrictions 7.5 High -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Unauthorized Viewing of Queue API Information 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Administrators to Access API Tokens 6.5 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins has Local File Inclusion Vulnerability 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins has Information Disclosure via Sidepanel Widget 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack 6.8 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins discloses project names via fingerprints 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins allows for Privilege Escalation by Remote Authenticated Users 7.5 High -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Cross-Site Scripting (XSS) 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation 4.6 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins Vulnerable to Denial of Service (DoS) 3.5 Low -
rubygem-openshift-origin-consoleRed Hat Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote... 3.5 Low -
rubygem-openshift-origin-consoleRed Hat Jenkins allows for Privilege Escalation by Remote Authenticated Users 6.5 Medium -
rubygem-openshift-origin-consoleRed Hat rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to... 6.5 Medium -
rubygem-openshift-origin-consoleRed Hat Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows... 7.5 High -
rubygem-openshift-origin-consoleRed Hat Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number... 2.1 Low -
rubygem-openshift-origin-consoleRed Hat Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068... 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent... 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name 2.1 Low -
rubygem-openshift-origin-consoleRed Hat The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin... 3.6 Low -
rubygem-openshift-origin-consoleRed Hat Jenkins allows attackers to obtain the master cryptographic key 2.6 Low -
rubygem-openshift-origin-consoleRed Hat Jenkins allows Cross-Site Scripting (XSS) 3.5 Low -
rubygem-openshift-origin-consoleRed Hat Jenkins affected by Open Redirect Vulnerability 5.8 Medium -
rubygem-openshift-origin-consoleRed Hat Jenkins allows HTTP Injection and Response Splitting 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the... 2.1 Low -
rubygem-openshift-origin-consoleRed Hat ActiveRecord vulnerable to modification of protected model attributes 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat Active Record allows bypassing of database-query restrictions 6.4 Medium -
rubygem-openshift-origin-consoleRed Hat Active Record contains SQL Injection 7.5 High -
rubygem-openshift-origin-consoleRed Hat Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without... 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0... 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat actionpack Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat activesupport Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat actionpack Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-consoleRed Hat actionpack Improper Authentication vulnerability 5.0 Medium -
rubygem-openshift-origin-consoleRed Hat activerecord vulnerable to SQL Injection 7.5 High - Show olderLoading…