redhat openshift container platform 3.10 vulnerabilities and exploits

(subscribe to this query)

578

VMScore

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to...

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

448

VMScore

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crash...

Kubernetes Kubernetes Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

1 Article

519

VMScore

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary...

Kubernetes Kubernetes 1.12.11 Kubernetes Kubernetes Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.10 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

1 Article

358

VMScore

In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: application...

Kubernetes Kubernetes Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

5 Github repositories

517

VMScore

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container i...

Kubernetes Kubernetes Kubernetes Kubernetes 1.14.0 Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

3 Github repositories

578

VMScore

The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning t...

Kubernetes Kubernetes Kubernetes Kubernetes 1.12.11 Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.10 Redhat Openshift Container Platform 3.11

1 Github repository1 Article

383

VMScore

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Redhat Openshift Container Platform

445

VMScore

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard...

Redhat Openshift Container Platform

605

VMScore

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

Xtermjs Xterm.js Redhat Openshift Container Platform

695

VMScore

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer...

1 Article

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook