GHSA-RQPH-25Q9-9JHP Insecure cookies in Openshift Origin

In Openshift Origin the cookies being set in console have no 'secure', 'HttpOnly' attributes...

Insecure cookies in Openshift Origin

In Openshift Origin the cookies being set in console have no 'secure', 'HttpOnly' attributes...

CVE-2015-3207

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes...

Design/Logic Flaw

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes...

CVE-2015-3207

CVE-2015-3207 affects OpenShift Origin 3 where cookies set by the console lack the Secure and HttpOnly attributes. This misconfiguration enables potential exposure of session data over non-HTTPS connections and increases cookie theft risk. NVD assigns a MEDIUM base score (CVSS v2: 5.0; CVSS v3.1:...

CVE-2015-3207

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes...

Red Hat OpenShift 缓冲区错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. A buffer error vulnerability exists in Red Hat OpenShift Developer Tools and Services. A remote attacker could exploit this...

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift Origin version 3, which stems from a cookie set in the console that does not have...

PT-2022-7817 · Red Hat · Openshift Origin

Name of the Vulnerable Software and Affected Versions: Openshift Origin version 3 Description: The issue is related to insecure cookies being set in the console of Openshift Origin. Specifically, the cookies lack 'secure' and 'HttpOnly' attributes. Recommendations: For Openshift Origin version 3,...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.9.41 packages update

Red Hat OpenShift Container Platform release 4.9.41 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.2 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2014-0068

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission...

Code injection

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission...

CVE-2014-0068

CVE-2014-0068 concerns Red Hat OpenShift node-utils, where the watchman component creates /var/run/watchman.pid and /var/log/watchman.ouput with world-writable permissions. This insecure file mode could allow any local user to write to these files, potentially altering behavior of the watchman se...

CVE-2014-0068

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission...

CVE-2013-4561

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

Design/Logic Flaw

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

CVE-2013-4561

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

CVE-2013-4561

CVE-2013-4561 concerns OpenShift runtime: a cron job on an OpenShift node updates mcollective facts and mishandles a temporary file. The root cause is improper handling of a temporary file during that cron operation, which can lead to confidentiality and integrity losses. The NVD metrics indicate...

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift that stems from a cron job to update mcollective with error handling temporary...