Red Hat Atomic Openshift vulnerabilities

3 vulnerabilities

Known vulnerabilities in Red Hat Atomic Openshift, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2018-14632ubuntugolang-github-evanphx-json-patch+22
EPSS score
2.23%
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.5.4CVE-2019-3884red hatatomic-openshift+1
EPSS score
0.62%
A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.5.4CVE-2019-3889red hatatomic-openshift+14
EPSS score
0.87%
A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11. An attacker could use this flaw to steal authorization data by getting them to click on a malicious link.