Red Hat OpenShift vulnerabilities

7 published CVEs name Red Hat OpenShift among the affected products.

Critical 0High 3Medium 3Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2019-19355
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container…
Red Hat · openshift
High7.0
CVE-2019-19351
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use…
Red Hat · openshift
High7.0
CVE-2019-10213
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or…
Red Hat · openshift
Medium5.3
CVE-2019-14845
A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification.…
Red Hat · openshift
Medium5.7
CVE-2019-10165
OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A…
Red Hat · openshift
Low2.3
CVE-2016-7075
It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker…
Red Hat · OpenShift
High7.5
CVE-2017-12195
A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to…
Red Hat · OpenShift
Medium6.5