Skip to contentRedhat Openshift vulnerabilities
- netlify kiali-operator, redhat openshift service mesh +1 moreAccess control flaw in KialiCVE-2021-3495Fix available8.8 High
- redhat openshiftA flaw was found in the OpenShift web console, where the access token is stored in the browser's...CVE-2020-17616.1 Medium
- red hat resteasy, redhat fuse, jboss enterprise application platform +1 more +3 moreCross-site scripting in RESTEasyCVE-2020-10688Fix available6.1 Medium
- [red hat] networkmanager, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a...CVE-2021-20297Fix available5.5 Medium
- redhat openshift container platformA Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file...CVE-2020-278337.1 High
- storage project storage, fedoraproject fedora, redhat enterprise linux +1 more +3 moreImproper Locking in github.com/containers/storageCVE-2021-20291Fix available6.5 Medium
- redhat openshift container platformAn insecure modification vulnerability in the /etc/passwd file was found in the operator...CVE-2019-193547.8 High
- redhat openshift container platformAn insecure modification vulnerability in the /etc/passwd file was found in the operator...CVE-2019-193537.0 High
- redhat openshift container platformAn insecure modification vulnerability in the /etc/passwd file was found in the operator...CVE-2019-193527.0 High
- redhat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible...CVE-2019-193507.8 High
- redhat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the container...CVE-2019-193497.8 High
- red hat openshift container platformA flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to...CVE-2019-102007.2 High
- red hat atomic-openshift, redhat openshift, openshift container platform +2 moreA flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift...CVE-2019-102256.3 Medium
- redhat openshift builder, openshift container platform +1 moreA privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into the container image under construction. An OpenShift…CVE-2021-33448.8 High
- redhat kubernetes-client, a-mq online, build of quarkus +6 more +8 moreImproper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes ClientCVE-2021-20218Fix available7.4 High
- pygments, debian linux, fedoraproject fedora +5 more +7 moreInfinite Loop in PygmentsCVE-2021-20270Fix available7.5 High
- linux kernel, redhat enterprise linux, openshift container platform +2 moreThere is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with...CVE-2021-20194Fix available7.8 High
- redhat openshift container platformA privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to th…CVE-2021-201828.8 High
- red hat undertow, redhat jboss fuse, openshift application runtimes +2 moreDenial of service in UndertowCVE-2020-27782Fix available7.5 High
- redhat openshift installer, red hat openshift/installer +1 moreA flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned…CVE-2021-201988.1 High
- keycloak, redhat openshift application runtimes, single sign-on +1 more +3 moreOIDC Logout redirect in keycloakCVE-2020-10734Fix available3.3 Low
- keycloak, redhat jboss fuse, openshift application runtimes +1 more +3 moreGeneration of Error Message Containing Sensitive Information in KeycloakCVE-2020-17172.7 Low
- istio, redhat openshift service mesh +1 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2019-250146.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 more +4 moreA NULL pointer dereference flaw was found in the Linux kernel’s GPU Nouveau driver functionality...CVE-2020-25639Fix available4.4 Medium
- openvswitch, fedoraproject fedora, lldpd project lldpd +14 more +16 moreA flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause...CVE-2020-27827Fix available7.5 High
- saml project saml, fedoraproject fedora, grafana +3 more +5 moreXML Processing error in github.com/crewjam/samlCVE-2020-27846Fix available9.8 Critical
- ceph, fedoraproject fedora, redhat ceph storage +2 more +4 moreUser credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,...CVE-2020-27781Fix available7.1 High
- linux kernel, netapp cloud backup, solidfire baseboard management controller +3 more +5 moreA flaw was found in the Linux kernels implementation of MIDI (kernel 5.7-rc6), where an attacker...CVE-2020-27786Public exploitFix available7.8 High
- linux kernel, redhat enterprise linux, openshift container platform +2 moreA flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On...CVE-2020-27777Fix available6.7 Medium
- elastic kibana, redhat openshift container platform +1 moreThe elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana consol…CVE-2020-278166.1 Medium
- heketi project heketi, redhat enterprise linux, gluster storage +1 more +3 moreHeketi logs sensitive informationCVE-2020-10763Fix available5.5 Medium
- ceph, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...CVE-2020-25660Fix available8.8 High
- redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 moreUncontrolled Resource Consumption in WildFlyCVE-2020-25689Fix available5.3 Medium
- redhat jboss enterprise application platform, openshift application runtimes, single sign-on +2 moreA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...CVE-2020-142996.5 Medium
- redhat wildfly openssl, netapp oncommand insight, oncommand workflow automation +7 more +9 moreWildfly-OpenSSL memory leak flawCVE-2020-25644Fix available7.5 High
- containers podman, fedoraproject fedora, redhat enterprise linux +1 more +3 moreInformation disclosure in podmanCVE-2020-14370Fix available5.3 Medium
- redhat openshiftA content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw...CVE-2020-107154.3 Medium
- keycloak, redhat openshift application runtimes, single sign-on +2 moreAllocation of Resources Without Limits or Throttling in KeycloakCVE-2020-10758Fix available7.5 High
- red hat, inc. jboss enterprise application platform, redhat jboss data grid, openshift application runtimes +1 more +3 moreThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...CVE-2020-17105.3 Medium
- kubevirt, redhat openshift virtualization +1 morePrivilege Escalation in kubevirtCVE-2020-14316Fix available9.9 Critical
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimCVE-2020-15705Fix available6.4 Medium
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.CVE-2020-15707Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.CVE-2020-15706Fix available6.4 Medium
- red hat wildfly, redhat amq, jboss-ejb-client +4 more +6 moreWildfly EJB Client causes DoSCVE-2020-14297Fix available6.5 Medium
- red hat wildfly, redhat amq, jboss enterprise application platform continuous delivery +3 more +5 moreA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...CVE-2020-143076.5 Medium
- containers podman, redhat enterprise linux, openshift container platform +2 moreImproper Authorization in github.com/containers/libpodCVE-2021-20188Fix available7.0 High
- elastic kibana, redhat openshift container platform +1 moreIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...CVE-2020-107434.3 Medium
- [unknown] docker, redhat enterprise linux server, openshift container platform +2 moreThe version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053...CVE-2020-142988.8 High
- openshift openshift/openshift-apiserver, redhat openshift container platform +1 moreA flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens...CVE-2020-107527.5 High
- red hat undertow, netapp oncommand insight, redhat jboss enterprise application platform +1 more +3 moreAllocation of Resources Without Limits or Throttling in UndertowCVE-2020-10705Fix available7.5 High
- Show moreLoading…