Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2017-7517

Published: 17/10/2022 Updated: 19/10/2022
CVSS v3 Base Score: 3.5 | Impact Score: 1.4 | Exploitability Score: 2.1
VMScore: 0
Subscribe to Openshift

Vulnerability Summary

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access the metrics stored from the original "MyProject" instance.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat openshift 3.0

Vendor Advisories

Red Hat: CVE-2017-7517
Impact: Low Public Date: 2017-04-25 CWE: CWE-20 Bugzilla: 1470414: CVE-2017-7517 OSE 3: Metrics accessi ...

References

CWE-20https://access.redhat.com/security/cve/CVE-2017-7517https://bugzilla.redhat.com/show_bug.cgi?id=1470414https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2017-7517
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-25525CVE-2024-4652CVE-2024-1438CVE-2024-4671CVE-2024-34351arbitrary CVE-2024-4650SQL injectionoverflow
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook