redhat openshift container platform 3.11 vulnerabilities and exploits

(subscribe to this query)

In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: application...

Kubernetes Kubernetes Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

5 Github repositories

Kibana versions prior to 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing ...

Elastic Kibana Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

15 Github repositories

A vulnerability in the Stapler web framework used in Jenkins 2.185 and previous versions, LTS 2.176.1 and previous versions allowed malicious users to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

Jenkins Jenkins Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

Kibana versions prior to 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An authenticated attacker with privileges to create TSVB visualizations could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code...

Elastic Kibana Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.0

A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could ab...

Kubernetes Cri-o Fedoraproject Fedora -Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2

2 Github repositories

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container i...

Kubernetes Kubernetes Kubernetes Kubernetes 1.14.0 Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 3.10

3 Github repositories

The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning t...

Kubernetes Kubernetes Kubernetes Kubernetes 1.12.11 Redhat Openshift Container Platform 3.9 Redhat Openshift Container Platform 3.10 Redhat Openshift Container Platform 3.11

1 Github repository1 Article

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and previous versions related to the handling of type casts allowed malicious users to execute arbitrary code in sandboxed scripts.

Jenkins Script Security Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and previous versions related to the handling of method pointer expressions allowed malicious users to execute arbitrary code in sandboxed scripts.

Jenkins Script Security Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and previous versions allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by global libraries.

Jenkins Pipeline\\ Shared Groovy Libraries Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook