RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0763)

An updated rubygem-openshift-origin-node package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0.6. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 6 : openshift-origin-broker (RHSA-2014:0422)

Updated openshift-origin-broker and rubygem-openshift-origin-auth-remote-user packages that fix one security issue are now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring...

RHEL 6 : openshift-origin-broker-util (RHSA-2014:0461)

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

[SECURITY] Fedora 28 Update: origin-3.9.0-1.fc28

OpenShift Origin is a distribution of Kubernetes optimized for application development and deployment. OpenShift Origin adds developer and operational centric tools on top of Kubernetes to enable rapid application development, easy deployment and scaling, and long-term lifecycle maintenance for...

CVE-2013-4364: Improper Link Resolution Before File Access

1 oo-analytics-export and 2 oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp...

PT-2018-4101

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise versions 1 and 2 Description The issue allows local users to have unspecified impact via a symlink attack on an unspecified file in /tmp. This is related to the oo-analytics-export and oo-analytics-import component...

Design/Logic Flaw

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal...

CVE-2015-8945

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal...

CVE-2015-8945

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal...

CVE-2015-8945: Undefined Security Weakness

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal...

PT-2016-4063

Name of the Vulnerable Software and Affected Versions OpenShift Origin versions 1.1.6 and earlier Description The issue improperly stores router credentials as environment variables in the pod when the --credentials option is used. This allows local users to obtain sensitive private key informati...

Red Hat OpenShift Origin Information Disclosure Vulnerability

Red Hat OpenShift Origin is an open source Platform as a Service PaaS product from Red Hat, Inc. An information disclosure vulnerability exists in Red Hat OpenShift Origin, which can be exploited by attackers to obtain sensitive information...

CVE-2016-2160

Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image...

CVE-2016-3711: Exposure of Sensitive Information to an Unauthorized Actor

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFTnamespaceSERVERID" cookie...

CVE-2016-2160: Undefined Security Weakness

Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image...

PT-2016-5671 · Red Hat +1 · Openshift Origin +2

Name of the Vulnerable Software and Affected Versions: HAproxy in Red Hat OpenShift Enterprise version 3.2 HAproxy in OpenShift Origin version 3.2 Description: The issue allows local users to obtain the internal IP address of a pod by reading the OPENSHIFT namespace SERVERID cookie...

PT-2016-5039

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise version 3.2 OpenShift Origin affected versions not specified Description The issue allows remote authenticated users to execute commands with root privileges. This is achieved by changing the root password in an st...

CVE-2015-5274

rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker...

CVE-2015-5274: Improper Neutralization of Special Elements used in a Command

rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker...

2.2: API command injection vulnerability

A command injection flaw was found in the OpenShift Origin Management Console. A remote, authenticated user permitted to send requests to the Broker could use this flaw to execute arbitrary commands with elevated privileges on the Red Hat OpenShift server...