2 matches found
Code injection
It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificate...
4.1CVSS6.5AI score0.00284EPSS
SaveExploits1References1Affected Software1
CVE-2021-3636
It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificate...
4.6CVSS3.6AI score0.00284EPSS
SaveExploits1References3
20