Skip to contentRedhat Openshift vulnerabilities
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An...CVE-2020-70137.2 High
- red hat containernetworking/plugins, fedoraproject fedora, linuxfoundation cni network plugins +2 more +4 morecontainernetworking/plugins vulnerable to MitM attacksCVE-2020-10749Public exploitFix available6.0 Medium
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreHTTP Request Smuggling in UndertowCVE-2020-10719Fix available6.5 Medium
- keycloak, quarkus, redhat decision manager +4 more +6 moreImproper Input Validation in KeycloakCVE-2020-1714Fix available7.5 High
- keycloak, redhat jboss fuse, openshift application runtimes +2 moreImproper Authentication for KeycloakCVE-2020-1718Fix available7.1 High
- redhat openshift container platform, [unknown] openshift/openshift-apiserver +1 moreA flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the...CVE-2020-107066.3 Medium
- keycloak, redhat openshift application runtimes, single sign-on +2 moreKeycloak Insufficient Session ExpiryCVE-2020-1724Fix available4.3 Medium
- red hat soteria, redhat jboss enterprise application platform, jboss enterprise application platform continuous delivery +1 more +3 moreA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...CVE-2020-17324.2 Medium
- [kiali] kiali, redhat openshift service mesh +1 moreInsufficient Session Expiration in KialiCVE-2020-1762Fix available7.0 High
- red hat openshift-ansible, redhat openshift container platform +1 moreA flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive...CVE-2020-17415.9 Medium
- redhat openshift container platform, red hat openshift/cluster-image-registry-operator +1 moreInformation Disclosure in OpenShift Container PlatformCVE-2020-107127.0 High
- red hat undertow, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreImproper Input Validation in UndertowCVE-2020-1757Fix available8.1 High
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...CVE-2020-1760Fix available5.8 Medium
- ceph, redhat ceph storage, openshift +2 more +4 moreA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...CVE-2020-1759Fix available6.4 Medium
- openshift enterprise openshift/apb-base, redhat openshift +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in the container...CVE-2019-193487.0 High
- openshift enterprise openshift/mariadb-apb, redhat openshift +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in the container...CVE-2019-193467.0 High
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- buildah project buildah, redhat enterprise linux, openshift container platform +2 morePath Traversal in BuildahCVE-2020-10696Fix available8.8 High
- kiali, redhat openshift service mesh +1 moreHard coded cryptographic key in KialiCVE-2020-1764Public exploitFix available8.6 High
- [unknown] openshift/mediawiki-apb, redhat openshift +1 moreA vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an...CVE-2019-193457.0 High
- [unknown] openshift/mediawiki, redhat openshift +1 moreA vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an...CVE-2020-17097.0 High
- [unknown] openshift/postgresql-apb, redhat openshift +1 moreA vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an...CVE-2020-17077.0 High
- red hat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp...CVE-2019-193557.0 High
- red hat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the container...CVE-2019-193517.0 High
- redhat openshift, red hat openshift/installer +1 moreDuring installation of an OpenShift 4 cluster, the `openshift-install` command line tool creates...CVE-2019-193354.4 Medium
- red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreInadequate Encryption Strength and Algorithm Downgrade in WildflyCVE-2019-148877.4 High
- red hat openshift/apb-tools-container, redhat openshift container platform +1 moreIt has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1...CVE-2020-17067.0 High
- envoyproxy envoy, redhat openshift service mesh +1 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86617.5 High
- envoyproxy envoy, redhat openshift service mesh, debian linux +2 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86597.5 High
- fasterxml jackson-databind, apache geode, redhat decision manager +5 more +7 morePolymorphic deserialization of malicious object in jackson-databindCVE-2019-14892Fix available7.5 High
- red hat openshift-service-mesh/kiali-rhel7-operator, redhat openshift service mesh +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in all versions of...CVE-2020-17047.0 High
- gpgme project gpgme, fedoraproject fedora, redhat enterprise linux for ibm z systems +6 more +8 moreGPGME Go wrapper contains Use After FreeCVE-2020-8945Fix available7.5 High
- istio, redhat openshift service mesh +1 moreIstio 1.3 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path...CVE-2020-8595Fix available7.3 High
- red hat openshift enterprise, redhat openshift +1 moreThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...CVE-2014-02349.8 Critical
- containers podman, libpod project libpod, redhat enterprise linux +1 more +3 morePodman has Files or Directories Accessible to External PartiesCVE-2020-1726Fix available5.9 Medium
- red hat openshift/mysql-apb, redhat openshift container platform +1 moreIt has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from...CVE-2020-17087.0 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- [unknown] systemd, debian linux, redhat ceph storage +7 more +9 moreA heap use-after-free vulnerability was found in systemd before version v245-rc1, where...CVE-2020-1712Public exploitFix available7.8 High
- [unknown] ceph, canonical ubuntu linux, opensuse leap +1 more +3 moreA flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An...CVE-2020-1700Fix available6.5 Medium
- openshift origin origin, red hat openshift origin, redhat openshift +2 moreThe download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary...CVE-2013-20609.8 Critical
- netty, debian linux, fedoraproject fedora +3 more +5 moreHTTP Request Smuggling in NettyCVE-2020-7238Fix available7.5 High
- redhat openshift container platform, [red hat] openshift-ansible +1 moreA flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster....CVE-2019-14819Fix available7.5 High
- redhat openshift container platform, red hat library-go +1 moreOpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the...CVE-2019-148545.3 Medium
- openshift enterprise, red hat, inc. openshift enterprise, redhat openshift +2 moreA CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic...CVE-2013-0196Fix available6.5 Medium
- smartbear swagger-ui, redhat jboss fuse, openshift +2 moreImproper Neutralization of Input During Web Page Generation in swagger-uiCVE-2016-1000229Public exploitFix available6.1 Medium
- mcollective, debian linux, puppet marionette collective +1 more +3 moremcollective has a default password set at installCVE-2014-01759.8 Critical
- openshiftOpenshift has shell command injection flaws due to unsanitized data being passed into shell...CVE-2014-01638.8 High
- sencha connect, debian linux, opensuse +1 more +3 moremethodOverride Middleware Reflected Cross-Site Scripting in connectCVE-2013-7370Fix available6.1 Medium
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- kubernetes external-provisioner, external-resizer, external-snapshotter +4 more +6 moreKubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutationCVE-2019-11255Fix available4.8 Medium
- Show moreLoading…