Privilege Escalation

openshift-ansible is vulnerable to privilege escalation. A remote unauthenticated attacker could exploit the flawed SSL Certificate Authentication component to read and modify all the data about the Openshift cluster in the etcd datastore, potentially adding another compute node, or bringing down...

openshift-ansible: Incorrectly quoted values in etcd.conf causes disabling of SSL client certificate authentication

OpenShift and Atomic Enterprise Ansible deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabled. Quotations around the values of ETCDCLIENTCERTAUTH and ETCDPEERCLIENTCERTAUTH in etcd.conf result in etcd being configured to allow remote users to conne...