openshift_container_platform vulnerabilities and exploits

(subscribe to this query)

7.1

CVSSv3

A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data ...

Redhat Keycloak -Redhat Openshift Container Platform 4.9 Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.12 Redhat Single Sign-on 7.6

6.5

CVSSv3

OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified...

Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2

7.5

CVSSv3

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.13 Redhat Openshift Container Platform 4.14

7.8

CVSSv3

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Redhat Openshift Container Platform

5.5

CVSSv3

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local malicious user to access information outside of their permissions.

Redhat Jboss Middleware 1 Redhat Jboss A-mq 7 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.12

5.5

CVSSv3

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.

Redhat Jboss Middleware 1 Redhat Jboss A-mq 7 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.12

5.4

CVSSv3

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

Redhat Single Sign-on -Redhat Keycloak Redhat Single Sign-on Redhat Openshift Container Platform 4.9 Redhat Openshift Container Platform 4.10

9.8

CVSSv3

A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an malicious user to access resources that would otherwise be restricted to specified IP ranges. The highest threat from this vulnerability is...

Redhat Openshift Container Platform 4.6

6.8

CVSSv3

A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user'...

Redhat Single Sign-on 7.0 Redhat Keycloak Redhat Single Sign-on 7.5.0 Redhat Openshift Container Platform 4.8 Redhat Openshift Container Platform 4.9

7.5

CVSSv3

The proglottis Go wrapper prior to 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.

Gpgme Project Gpgme Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1 Redhat Openshift Container Platform 4.2 Redhat Openshift Container Platform 4.3 Redhat Openshift Container Platform 4.4 Redhat Openshift Container Platform 4.5 Redhat Openshift Container Platform For Ibm Z 4.1 Redhat Openshift Container Platform For Ibm Z 4.2 Redhat Openshift Container Platform For Linuxone 4.1 Redhat Openshift Container Platform For Linuxone 4.2 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux For Power Little Endian 7.0 Redhat Enterprise Linux For Ibm Z Systems 7.0 Redhat Openshift Container Platform 3.11

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook