Authorization Bypass

2019-05-0205:34:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

38.1%

JSON

openshift is vulnerable to authorization bypass. The vulnerability exists in a multi-tenante SDN, and when a build is run in a namespace that is isolated from pods in other namespaces.

CPENameOperatorVersion
nodejs-node-uuideq1.4.3__1.el7aos
nodejs-node-uuideq1.4.1__1.el7
atomic-openshifteq3.2.0.20__1.git.0.f44746c.el7
atomic-openshifteq3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshifteq3.1.1.6__6.git.43.f583589.el7aos
atomic-openshifteq3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshifteq3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshifteq3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshifteq3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshifteq3.1.0.4__1.git.10.ec10652.el7aos

Name	Operator	Version
nodejs-node-uuid	eq	1.4.3__1.el7aos
nodejs-node-uuid	eq	1.4.1__1.el7
atomic-openshift	eq	3.2.0.20__1.git.0.f44746c.el7
atomic-openshift	eq	3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshift	eq	3.1.1.6__6.git.43.f583589.el7aos
atomic-openshift	eq	3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshift	eq	3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshift	eq	3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshift	eq	3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshift	eq	3.1.0.4__1.git.10.ec10652.el7aos