CVE-2020-35514

An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShif...

CVE-2020-35514: Incorrect Privilege Assignment

An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShif...

PT-2021-11782

Name of the Vulnerable Software and Affected Versions: OpenShift versions prior to openshift4/ose-machine-config-operator v4.7.0-202105111858.p0. Description: An insecure modification flaw was found in the /etc/kubernetes/kubeconfig file in OpenShift, allowing an attacker with access to a running...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.4.3 ose-machine-config-operator-container security update

An update for ose-machine-config-operator-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...