redhat openshift 3.7 vulnerabilities and exploits

(subscribe to this query)

445

VMScore

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Redhat Openshift 3.7 Redhat Openshift 3.6 Redhat Openshift 3.8 Redhat Openshift 3.9 Redhat Openshift 3.10 Redhat Openshift 3.11 Redhat Openshift 4.1

312

VMScore

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod.

Redhat Openshift 3.7 Redhat Openshift 3.9 Redhat Openshift 3.4 Redhat Openshift 3.6 Redhat Openshift 3.0 Redhat Openshift 3.1 Redhat Openshift 3.2 Redhat Openshift 3.3 Redhat Openshift 3.5

481

VMScore

Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.

Redhat Openshift 3.7

312

VMScore

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 up to and including 3.7 and openshift-enterprise-3.9 up to and including 3.11. An attacker could use this flaw to steal authorization ...

Redhat Openshift Container Platform Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2

445

VMScore

In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service (DoS) attack on an Openshift 3.9, or 3.7 Cluster.

Redhat Openshift

614

VMScore

In all versions of cpio prior to 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths ...

Gnu Cpio Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0

587

VMScore

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x prior to 2.8.15 and ansible-engine 2.9.x prior to 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the defaul...

Redhat Ansible Engine Redhat Ansible Tower 3.0 Redhat Ansible Tower Redhat Ceph Storage 2.0 Redhat Ceph Storage 3.0 Redhat Openstack Platform 10.0 Redhat Openstack Platform 13.0 Debian Debian Linux 10.0

685

VMScore

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Suc...

1 EDB exploit

445

VMScore

Python 2.7.x up to and including 2.7.16 and 3.x up to and including 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given ...

1 Article

384

VMScore

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network ...

2 Github repositories

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook