CVE-2022-0759

A flaw was found in kubeclient, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate it wrongly returns VERIFYNONE. Ruby applications that leverage...

Improper Certificate Validation

Overview kubeclient is a client for Kubernetes REST API. Affected versions of this package are vulnerable to Improper Certificate Validation via the parsing process of kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any...

Authorization Bypass

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.1. See the following advisory for the container imag...

Arbitrary Code Execution Through Object Deserialization

kubeclient is vulnerable to arbitrary code execution through object deserialization. The vulnerability exists due to the usage of the unsafe YAML.loadfile to read yaml files, allowing object deserialization to occur causing the code execution flaw...