146 matches found
PT-2022-7817 · Red Hat · Openshift Origin
Name of the Vulnerable Software and Affected Versions: Openshift Origin version 3 Description: The issue is related to insecure cookies being set in the console of Openshift Origin. Specifically, the cookies lack 'secure' and 'HttpOnly' attributes. Recommendations: For Openshift Origin version 3,...
CVE-2015-3207: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes...
Red Hat OpenShift security vulnerabilities
Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift Origin version 3, which stems from a cookie set in the console that does not have...
openshift-origin-node Improper Input Validation vulnerability
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly...
GHSA-77XQ-7C6P-6XP6 RubyGem openshift-origin-controller is vulnerable to command injection
rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection...
RubyGem openshift-origin-controller is vulnerable to command injection
rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview openshift-origin-controller is a The OpenShift Origin Controller is a Rails plugin which provides the models and controllers which implement the application and user management functionality and provides a REST API. Affected versions of this package are vulnerable to Improper...
RubyGem openshift-origin-controller is vulnerable to command injection
'rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection'...
GHSA-RF3M-MHV7-X39F Denial of Service in OpenShift Origin
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service master process crash via crafted JSON data...
Denial of Service in OpenShift Origin
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service master process crash via crafted JSON data...
[SECURITY] Fedora 32 Update: origin-3.11.2-1.fc32
OpenShift Origin is a distribution of Kubernetes optimized for enterprise a pplication development and deployment. OpenShift Origin adds developer and operational centric tools on top of Kubernetes to enable rapid application development, easy deployment and scaling, and long-term lifecycle...
Fedora: Security Advisory for origin (FEDORA-2020-aeea04cd13)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Cross site request forgery (csrf)
The downloadfromurl function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart...
CVE-2013-2060
The downloadfromurl function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart...
CVE-2013-2060: Improper Neutralization of Special Elements used in an OS Command
The downloadfromurl function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart...
PT-2020-7380
Name of the Vulnerable Software and Affected Versions: OpenShift Origin affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart, specifically through the download from url...
PT-2019-6876
Name of the Vulnerable Software and Affected Versions rubygem-openshift-origin-controller versions affected versions not specified Description The issue allows the API to be used for creating applications via cartridge cache.rb, where the URI.prase function can be exploited to perform command...
CVE-2013-2095: Improper Neutralization of Special Elements in Output Used by a Downstream Component
rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection...
