Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:0451
HistoryFeb 19, 2020 - 8:04 p.m.

(RHSA-2020:0451) Moderate: OpenShift Container Platform 3.11 security update

2020-02-1920:04:47
access.redhat.com
98

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.8%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

Security Fix(es):

  • SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.

Related

oraclelinux 4
nessus 43
prion 3
f5 3
cve 3
redhat 15
ubuntucve 3
redhatcve 2
veracode 3
centos 2
openvas 18
debiancve 1
amazon 1
checkpoint_advisories 1
ibm 69
attackerkb 1
cloudfoundry 1
alpinelinux 1
hackerone 7
github 1
threatpost 4
osv 2
openssl 1
zdt 1
fortinet 1
exploitpack 1
slackware 1
seebug 1
symantec 1
ubuntu 2
packetstorm 1
exploitdb 1
oraclelinux
oraclelinux
sqlite security update
2020-01-27 00:00:00
sqlite security update
2020-01-29 00:00:00
python security update
2018-07-03 00:00:00
nessus
nessus
RHEL 8 : sqlite (RHSA-2020:0273)
2020-01-30 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : sqlite Vulnerability (NS-SA-2020-0096)
2020-12-09 00:00:00
Oracle Linux 8 : sqlite (ELSA-2020-0273)
2023-09-07 00:00:00
prion
prion
Design/Logic Flaw
2019-12-10 22:15:00
Design/Logic Flaw
2016-09-01 00:59:00
Design/Logic Flaw
2023-01-17 21:15:00
f5
f5
K19533600 : SQLite Vulnerability CVE-2019-13734
2022-07-22 00:00:00
SOL13167034 - OpenSSL vulnerability CVE-2016-2183
2016-10-04 00:00:00
K13167034 : OpenSSL vulnerability CVE-2016-2183
2016-10-04 00:00:00
cve
cve
CVE-2019-13734
2019-12-10 22:15:00
CVE-2016-2183
2016-09-01 00:59:00
CVE-2023-0296
2023-01-17 21:15:15
redhat
redhat
(RHSA-2020:0227) Important: sqlite security update
2020-01-27 07:50:15
(RHSA-2020:0273) Important: sqlite security update
2020-01-29 09:14:12
(RHSA-2020:2014) Important: sqlite security update
2020-05-05 07:45:32
ubuntucve
ubuntucve
CVE-2019-13734
2019-12-10 00:00:00
CVE-2016-2183
2016-08-31 00:00:00
CVE-2019-13750
2019-12-10 00:00:00
redhatcve
redhatcve
CVE-2019-13734
2019-12-11 01:21:48
CVE-2023-0296
2023-01-16 14:05:12
veracode
veracode
Arbitary Code Execution
2020-05-06 03:16:07
Information Disclosure
2017-01-09 02:06:31
Weak Encryption
2019-01-15 09:15:57
centos
centos
lemon, sqlite security update
2020-01-28 21:28:52
python, tkinter security update
2018-07-13 16:28:09
openvas
openvas
CentOS: Security Advisory for lemon (CESA-2020:0227)
2020-01-29 00:00:00
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2016-1090)
2020-01-23 00:00:00
Python < 2.7.13, 3.4.x < 3.4.7, 3.5.x < 3.5.3 Sweet32 attack (bpo-27850) - Linux
2021-11-01 00:00:00
debiancve
debiancve
CVE-2019-13734
2019-12-10 22:15:00
amazon
amazon
Important: sqlite
2020-02-17 19:48:00
checkpoint_advisories
checkpoint_advisories
Weak SSL 3DES Cipher Suites (CVE-2016-2183)
2016-09-25 00:00:00
ibm
ibm
Security Bulletin: IBM Tivoli Monitoring Basic Services component. (CVE-2016-2183)
2018-06-17 15:38:47
Security Bulletin: Vulnerability in the GSKit component of Tivoli Netcool/OMNIbus (CVE-2016-2183)
2018-06-17 15:38:05
Security Bulletin: GSKit Sweet32: Birthday attacks in IBM Content Collector for Microsoft SharePoint
2018-06-17 12:17:39
attackerkb
attackerkb
CVE-2016-2183
2016-09-01 00:00:00
cloudfoundry
cloudfoundry
CVE-2016-2183: Birthday attacks against TLS ciphers with 64bit block size | Cloud Foundry
2019-10-24 00:00:00
alpinelinux
alpinelinux
CVE-2016-2183
2016-09-01 00:59:00
hackerone
hackerone
Legal Robot: SWEET32 TLS attack
2017-01-18 18:03:52
Nextcloud: Nextcloud.com is vulnerable to SWEET32 attack
2017-01-18 18:23:36
UPchieve: Vulnerability Report - sweet32 UPchieve
2021-07-21 07:06:38
github
github
Kyverno vulnerable due to usage of insecure cipher
2023-05-30 20:07:06
threatpost
threatpost
New Collision Attacks Against 3DES, Blowfish Allow for Cookie Decryption
2016-08-24 08:00:39
OpenSSL Patches High-Severity OCSP Bug, Mitigates SWEET32 Attack
2016-09-23 15:47:13
OpenSSL Fixes Critical Bug Introduced by Latest Update
2016-09-26 10:45:04
osv
osv
CVE-2016-2183
2016-09-01 00:59:00
Kyverno vulnerable due to usage of insecure cipher
2023-05-30 20:07:06
openssl
openssl
Vulnerability in OpenSSL CVE-2016-2183
2016-08-24 00:00:00
zdt
zdt
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea
2017-05-31 00:00:00
fortinet
fortinet
Protect
2019-02-07 00:00:00
exploitpack
exploitpack
IBM Informix Dynamic Server Informix Open Admin Tool - DLL Injection Remote Code Execution Heap Buffer Overflow
2017-05-30 00:00:00
slackware
slackware
[slackware-security] python
2016-12-28 21:09:54
seebug
seebug
IBM Informix Dynamic Server Open Admin Tool RCE (CVE-2017-1092)
2017-05-24 00:00:00
symantec
symantec
SA133 : Sweet32 Birthday Attack against DES, 3DES, and Blowfish
2016-12-22 08:00:00
ubuntu
ubuntu
NSS vulnerabilities
2017-04-27 00:00:00
NSS vulnerability
2017-07-31 00:00:00
packetstorm
packetstorm
IBM Informix Dynamic Server DLL Injection / Code Execution
2017-05-31 00:00:00
exploitdb
exploitdb
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow
2017-05-30 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.8%

JSON
Related for RHSA-2020:0451
oraclelinux4nessus43prion3f53cve3redhat15ubuntucve3redhatcve2veracode3centos2openvas18debiancve1amazon1checkpoint_advisories1ibm69attackerkb1cloudfoundry1alpinelinux1hackerone7github1threatpost4osv2openssl1zdt1fortinet1exploitpack1slackware1seebug1symantec1ubuntu2packetstorm1exploitdb1