Skip to content
Openshift vulnerabilities
Newest
-
openshift osin, redhat openshift osin, openshift container platform +2 more
OpenShift OSIN CheckClientSecret timing discrepancy
CVE-2021-4294
Fix available
2.6 Low
-
openshift origin
Insecure cookies in Openshift Origin
CVE-2015-3207
Fix available
5.3 Medium
-
openshift openshift/openshift-apiserver, redhat openshift container platform +1 more
A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens...
CVE-2020-10752
7.5 High
-
redhat openshift container platform, [unknown] openshift/openshift-apiserver +1 more
A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the...
CVE-2020-10706
6.3 Medium
-
openshift enterprise, red hat, inc. openshift enterprise, redhat openshift +2 more
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic...
CVE-2013-0196
Fix available
6.5 Medium
-
openshift
Openshift has shell command injection flaws due to unsanitized data being passed into shell...
CVE-2014-0163
8.8 High
-
openshift
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary...
CVE-2014-0023
7.8 High
-
openshift origin
openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive priv…
CVE-2015-8945
5.1 Medium