7193 matches found
CVE-2024-26581
A flaw was found in the Linux kernel’s Netfilter subsystem. This issue occurs in the nftsetrbtree. rbtree lazy gc on insert, which might collect an end interval element just added in a transaction and skip the end interval elements not yet active. Mitigation 1. This flaw can be mitigated by...
CVE-2023-52433
A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nftsetrbtree, where new elements in this transaction might expire before the transaction ends. Skip sync GC for such elements, otherwise a commit path might walk over an already released object. Once the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update
Red Hat OpenShift Container Platform release 4.14.13 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Critical: Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.31.1 security update
Red Hat OpenShift Serverless 1.31.1 is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...
CVE-2024-1342
Rejected reason: Unable to reproduce...
Cross site request forgery (csrf)
A flaw was found in OpenShift. The existing Cross-Site Request Forgery CSRF protections in place do not properly protect GET requests, allowing for the creation of WebSockets via CSRF...
CVE-2024-1342
OpenShift CSRF flaw (CVE-2024-1342): protections do not properly cover GET requests, enabling creation of WebSockets via CSRF. Affected: Red Hat OpenShift. Root cause: CSRF protection weakness for GET traffic. Impact: potential unauthorized WebSocket creation; no exploit details provided in these...
PT-2024-17961 · Red Hat · Openshift
Name of the Vulnerable Software and Affected Versions: OpenShift affected versions not specified Description: A flaw was found in the existing Cross-Site Request Forgery CSRF protections, which do not properly protect GET requests. This allows for the creation of WebSockets via CSRF...
Important: Red Hat Bug Fix Advisory: OpenShift sandboxed containers 1.5.2 update
OpenShift sandboxed containers 1.5.2 is now available. OpenShift sandboxed containers support for OpenShift Container Platform provides users with built-in support for running Kata containers as an additional, optional runtime. This advisory contains an update for OpenShift sandboxed containers...
Critical: Red Hat Security Advisory: Release of OpenShift Serverless 1.31.1
Red Hat OpenShift Serverless version 1.31.1 is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.13.33 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.13.33 security and extras update
Red Hat OpenShift Container Platform release 4.13.33 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of...
CVE-2024-1342
A flaw was found in OpenShift. The existing Cross-Site Request Forgery CSRF protections in place do not properly protect GET requests, allowing for the creation of WebSockets via CSRF...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.14.12 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.12 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 for OpenShift image enhancement update
A new image is available for Red Hat Single Sign-On 7.6.7, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
Number withdrawn
Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. This CVE number has been withdrawn...
Jenkins: Session fixation vulnerability in OpenShift Login Plugin
A flaw was found in the Jenkins OpenShift Login Plugin. Affected versions of this plugin could allow a remote attacker to bypass security restrictions caused by not invalidating the existing session on login. By persuading a victim to visit a specially crafted Web site, an attacker can gain...
Jenkins: Open redirect vulnerability in OpenShift Login Plugin
A flaw was found in the Jenkins OpenShift Login Plugin. Affected versions of this plugin could allow a remote attacker to conduct phishing attacks caused by an open redirect vulnerability. An attacker can use a specially crafted URL to redirect a victim to arbitrary web sites...