CVE-2024-7631

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...

OpenShift Hive Has an Uncontrolled Resource Consumption Vulnerability

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

GHSA-C392-WRGW-JJFW OpenShift Hive Has an Uncontrolled Resource Consumption Vulnerability

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

CVE-2024-25132

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

CVE-2024-25132 Openshift-dedicated: hive: hibernation controller denial of service

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

CVE-2024-25132

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

CVE-2024-25132 Openshift-dedicated: hive: hibernation controller denial of service

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

CVE-2024-25132 Openshift-dedicated: hive: hibernation controller denial of service

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

CVE-2024-25132

Technical details for CVE-2024-25132 are not publicly provided in the supplied documents. Monitor for updates; no affected products, root cause, or remediation can be stated from these sources.

CVE-2024-25132

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

Red Hat OpenShift Dedicated 资源管理错误漏洞

Red Hat OpenShift Dedicated is a container platform management service for enterprise users from Red Hat, Inc. It is used to build, publish, and manage applications and supports migration of workloads across clouds. Red Hat OpenShift Dedicated suffers from a resource management error vulnerabilit...

PT-2025-11957

Name of the Vulnerable Software and Affected Versions OpenShift Console affected versions not specified Description A flaw was found in the OpenShift Console, specifically in an endpoint for plugins to serve resources in multiple languages, located at "/locales/resources.json". This endpoint uses...

CVE-2024-7631: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...

CVE-2024-25132: Uncontrolled Resource Consumption

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

Red Hat OpenShift Console 路径遍历漏洞

Red Hat OpenShift Console is an OpenShift console from Red Hat, Inc. A path traversal vulnerability exists in Red Hat OpenShift Console that stems from an insecure file path construction, which could allow an authenticated user to retrieve an arbitrary JSON file on the console by manipulating the...

PT-2025-11948

Name of the Vulnerable Software and Affected Versions OpenShift Dedicated affected versions not specified Description A flaw was found in the Hive hibernation controller component. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true and a...

GO-2025-3529 Openshift Hive Exposes VCenter Credentials via ClusterProvision in github.com/openshift/hive

Openshift Hive Exposes VCenter Credentials via ClusterProvision in github.com/openshift/hive...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.5 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0

The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0

The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...