7179 matches found
Low: Red Hat Security Advisory: OpenShift Container Platform 4.2.18 ose-installer-container security update
An update for ose-installer-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.7 servicemesh-proxy security update
Red Hat OpenShift Service Mesh 1.0.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.1 packages update
Red Hat OpenShift Container Platform release 4.3.1 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...
CVE-2014-0234
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
Design/Logic Flaw
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
CVE-2014-0234
Technical details for CVE-2014-0234 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources for exact remediation guidance.
CVE-2014-0234
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
PT-2020-7489 · Red Hat · Red Hat Openshift
Name of the Vulnerable Software and Affected Versions: Red Hat Openshift 1 affected versions not specified Description: The deployment script in the unsupported "OpenShift Extras" set of add-on scripts installs a default public key in the root user's authorized keys file. Recommendations: At the...
PT-2020-7493 · Red Hat · Red Hat Openshift
Name of the Vulnerable Software and Affected Versions: Red Hat Openshift version 1 Description: The issue is related to weak default permissions applied to the /etc/openshift/server priv.pem file on the broker server. This could allow users with local access to the broker to read this file...
PT-2020-7594 · Red Hat · Openshift
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
CVE-2020-1708
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...
CVE-2020-1708
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...
Code injection
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...
CVE-2020-1708
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...
CVE-2020-1708
CVE-2020-1708 affects OpenShift Container Platform/OpenShift Enterprise where multiple containers (notably openshift/mysql-apb) expose /etc/passwd to non-root modification. Root cause is that /etc/passwd privileges were set incorrectly, enabling privilege escalation for an attacker with local con...
PT-2020-14907 · Red Hat · Openshift Enterprise
Name of the Vulnerable Software and Affected Versions: openshift-enterprise versions 3.11 through 4.3 Description: A security issue has been identified where multiple containers in openshift-enterprise modify the permissions of /etc/passwd, allowing users other than root to modify it. An attacker...
CVE-2013-2060
The downloadfromurl function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart...
Cross site request forgery (csrf)
The downloadfromurl function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart...
CVE-2013-2060
The vulnerability CVE-2013-2060 affects OpenShift Origin’s download_from_url function. A remote attacker can trigger arbitrary commands by injecting shell metacharacters in the URL used to download a cart, enabling remote code execution with network access and high impact per the provided CVSS me...