redhat openshift container platform - vulnerabilities and exploits

(subscribe to this query)

NA

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the...

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.6 Redhat Openshift Container Platform 4.7 Redhat Openshift Container Platform 4.8 Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform 4.9

NA

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader ac...

Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.13 Redhat Openshift Container Platform 4.14

392

VMScore

It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can...

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2 Redhat Openshift Container Platform 4.3

392

VMScore

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running contain...

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2 Redhat Openshift Container Platform 4.3

312

VMScore

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 up to and including 3.7 and openshift-enterprise-3.9 up to and including 3.11. An attacker could use this flaw to steal authorization ...

Redhat Openshift Container Platform Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2

NA

An authentication bypass vulnerability exists in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need ...

Kubernetes Kube-apiserver -Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.13

356

VMScore

A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an malicious user to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest thre...

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.6 Redhat Openshift Container Platform 4.5.16

519

VMScore

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary...

Kubernetes Kubernetes 1.12.11 Kubernetes Kubernetes Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.10 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

1 Article

448

VMScore

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crash...

Kubernetes Kubernetes Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

1 Article

578

VMScore

A flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift Container Platform doesn't sufficiently protect the GlusterFS StorageClass against leaking of the restuserkey. An attacker with basic-user permissions is able to obtain the valu...

Redhat Openshift 4.2 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook