Design/Logic Flaw

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that 1 contain...

CVE-2016-3708

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that 1 contain...

CVE-2016-3708

CVE-2016-3708 affects Red Hat OpenShift Enterprise 3.2 when multi-tenant SDN is enabled. A build running in a namespace that would normally be isolated from other pods can access network resources on restricted pods via an s2i build using a builder image that (1) contains ONBUILD commands or (2) ...

PT-2016-5669 · Red Hat · Red Hat Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Enterprise version 3.2 Description: The issue allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that contains ONBUILD commands or does not contain a tar...

Red Hat OpenShift Enterprise Unauthorized Access Vulnerability Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform that builds, tests, deploys, and runs applications.OpenShift Enterprise is an open source version of the private cloud. A security vulnerability exists in Red Hat OpenShift Enterprise when the program is multi-tenant SDN...

Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security update

An update for atomic-openshift and nodejs-node-uuid is now available for Red Hat OpenShift Enterprise 3.2. In addition, all images have been rebuilt on the new RHEL 7.2.4 base image. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Skydive - An Open Source Real-Time Network Topology and Protocols Analyzer

Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology informations and flows and forward them to a central agent for further analysis. Al...

Open Source Real Time Network Analyzer: skydive

Open Source Real Time Network Topology and Protocols Analyzer Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology informations and flow...

Bohatei - Flexible and Elastic DDoS Defense

Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV. The repository contains a first version of the components described in the Bohatei paper, as well as a web-based User Interface. The backend folder consists of : an implementation of the...

HP SDN VAN Controller devices denial of service vulnerability

HP SDN VAN Controller devices are a suite of unified control devices from Hewlett-Packard HP that provide OpenFlow open source networking technology networking capabilities. A denial of service vulnerability exists in HP SDN VAN Controller devices version 2.5 and earlier versions, which could be...

CVE-2015-2122

The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port...

CVE-2015-2122

The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port...

CVE-2015-2122

The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port...

CVE-2015-2122

CVE-2015-2122 affects HP SDN VAN Controller devices (2.5 and earlier). The REST layer can be abused by remote attackers to cause a Denial of Service via traffic to the REST port. Public references confirm DoS/DDoS potential, with HP's bulletin outlining mitigations: isolate the controller’s manag...

HP SDN VAN Controller DoS

No description provided...

PHP calendar extension integer overflow vulnerability

PHP is a popular programming language. Multiple integer overflow vulnerabilities in the PHP calendar extension allow remote attackers to cause a denial of service attack by passing a specially crafted year value to the GregorianToSdn or JulianToSdn functions...

CVE-2014-6755

The SDN Forum TapaTalk aka com.tapatalk.forumshiftdeletenet application 3.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SDN Forum TapaTalk aka com.tapatalk.forumshiftdeletenet application 3.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6755

The SDN Forum TapaTalk aka com.tapatalk.forumshiftdeletenet application 3.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6755

The CVE-2014-6755 entry concerns the SDN Forum (TapaTalk) Android app, version 3.6.5 (com.tapatalk.forumshiftdeletenet). The issue is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and expose sensitive information via a crafted certifi...