XWiki XSS Vulnerability

The Image Import function in XWiki through 10.7 has XSS...

GHSA-6MVR-CQ72-F66V XWiki XSS Vulnerability

The Image Import function in XWiki through 10.7 has XSS...

Arbitrary Code Execution

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.1. See the following advisory for the container imag...

Authorization Bypass

atomic-openshift is vulnerable to authorization bypass attacks. The vulnerability exists as the OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from...

CVE-2018-16277

The Image Import function in XWiki through 10.7 has XSS...

CVE-2018-16277

The Image Import function in XWiki through 10.7 has XSS...

Cross site scripting

The Image Import function in XWiki through 10.7 has XSS...

CVE-2018-16277

The Image Import function in XWiki through 10.7 has XSS...

CVE-2018-16277

The CVE-2018-16277 entry concerns XSS in the Image Import function of XWiki versions up to and including 10.7 . The vulnerability is described as a cross-site scripting flaw in the image: function, with the CMV notes indicating XSS could be triggered via this component. The available connected so...

CVE-2017-15137

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

Design/Logic Flaw

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

CVE-2017-15137

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

CVE-2017-15137

CVE-2017-15137 affects OpenShift: the image import whitelist failed to enforce restrictions when executing commands like oc tag, potentially allowing restricted registries to be used. Root cause: whitelist enforcement flaw. Impact: open to running non-permitted images. Remediation: Red Hat adviso...

CVE-2017-15137

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

PT-2018-5780 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: OpenShift affected versions not specified Description: The issue concerns the OpenShift image import whitelist, which failed to properly enforce restrictions when executing commands like "oc tag". This could enable a user with OpenShift acces...

Microsoft Issues Emergency Patch For Critical Flaw In Windows Containers

Just a few days prior to its monthly patch release, Microsoft released an emergency patch for a critical vulnerability in the Windows Host Compute Service Shim hcsshim library that could allow remote attackers to run malicious code on Windows computers. Windows Host Compute Service Shim hcsshim i...

Windows Host Compute Service Shim Remote Code Execution Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists when the Windows Host Computing Services Shim hcsshim library fails to properly validate input when importing container images. An attacker...

CVE-2018-8115

A remote code execution vulnerability exists when the Windows Host Compute Service Shim hcsshim library fails to properly validate input while importing a container image, aka "Windows Host Compute Service Shim Remote Code Execution Vulnerability." This affects Windows Host Compute...

CVE-2017-15137

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...