10522 matches found
RHEL 7 / 8 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)
The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2594 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
RHEL 8 : Red Hat OpenShift Service Mesh servicemesh-grafana (RHSA-2020:2796)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2796 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...
RHEL 7 : OpenShift Container Platform 4.2.36 python-psutil (RHSA-2020:2593)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2593 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
RHEL 8 : Red Hat OpenShift Service Mesh servicemesh-cni (RHSA-2020:2799)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2799 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.z jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kubernetes:json_FuzzStrictDecode: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5729550645592064 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: jsonFuzzStrictDecode Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000037e3e637 Crash State: NULL Sanitizer: address ASAN...
Kubernetes: Private IP addresses Disclosure
The following URL leaks the Private IP Addresses:- kubernetes.io/feed.xml The following Server’s Cluster RFC 1918 IP addresses were disclosed in the response: • 10.1.2.3 • 10.104.207.136 • 10.224.0.0 • 10.250.0.0 • 10.250.112.0 • 10.250.96.0 • 10.55.252.216 • 10.96.0.0 • 10.96.0.1 • 10.96.15.180 ...
Security Bulletin: IBM Cloud Kubernetes Service is affected by a vulnerability in CNI IPv6 route advertisement (CVE-2020-13597)
Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in CNI IPv6 route advertisement that could allow the attacker to redirect full or partial network traffic from the node to the compromised pod within the cluster CVE-2020-13597 Vulnerability Details CVEID: CVE-2020-13597...
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2020-8552)
Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability in the Kubernetes API server that could lead to a denial of service CVE-2020-8552 Vulnerability Details CVEID: CVE-2020-8552 Description: Kubernetes kube-apiserver is vulnerable to a denial of service, caused by improp...
RHEL 7 : OpenShift Container Platform 4.3.26 python-psutil (RHSA-2020:2635)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2635 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.3.26 python-psutil security update
An update for python-psutil is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters
A vulnerability was found in affected container networking implementations that allow malicious containers in Kubernetes clusters to perform man-in-the-middle MitM attacks. A malicious container can exploit this flaw by sending “rogue” IPv6 router advertisements to the host or other containers, t...
CVE-2020-4062
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...
CVE-2020-4062
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...
Design/Logic Flaw
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...
CVE-2020-4062 Improper Access Control in Conjur OSS Helm Chart
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...
CVE-2020-4062
In Conjur OSS Helm Chart before 2.0.0, a critical issue leads to installing Conjur’s Postgres database with an open port. An attacker who knows the Postgres IP and port and has access to the Kubernetes cluster can gain full read/write access to the database, escalate privileges, and write policie...
GitLab Information Disclosure Vulnerability (CNVD-2021-19413)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...