Redhat Atomic Openshift vulnerabilities
2 vulnerabilities
Known vulnerabilities in Redhat Atomic Openshift, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2019-10176redhat · atomic-openshift +1 moreredhat atomic-openshiftA flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.CVSS5.8MediumEPSS0.55%RoutineCVE-2019-10150redhat · atomic-openshift +14 moreredhat atomic-openshiftIt was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.CVSS5.9MediumEPSS1.39%