CVE-2015-3207

CVE-2015-3207 affects OpenShift Origin 3 where cookies set by the console lack the Secure and HttpOnly attributes. This misconfiguration enables potential exposure of session data over non-HTTPS connections and increases cookie theft risk. NVD assigns a MEDIUM base score (CVSS v2: 5.0; CVSS v3.1:...

CVE-2015-8945

CVE-2015-8945 affects OpenShift Origin 1.1.6 and earlier, specifically the openshift-node component. When the --credentials option is used, router credentials were inappropriately stored as environment variables inside pods, enabling a local attacker to read sensitive private key information by i...