Redhat Openshift vulnerabilities
146 vulnerabilities
Known vulnerabilities in Redhat Openshift, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-1102red hat, inc.atomic-openshift+63
EPSS score2.42%
A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation.CVE-2018-1069red hat, inc.openshift enterprise+1EPSS score0.58%
Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.CVE-2018-1257debianlibspring-java+33EPSS score3.04%
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.CVE-2018-1059canonicalubuntu_linux+32EPSS score0.85%
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.CVE-2018-14645canonicalubuntu_linux+38EPSS score3.07%
A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.CVE-2018-10885redhatopenshift+1EPSS score1.62%
In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service (DoS) attack on an Openshift 3.9, or 3.7 Cluster.CVE-2018-10875alpineansible+15EPSS score0.59%
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.CVE-2013-2119ubunturuby-passenger+4EPSS score0.40%
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem.CVE-2013-2060red hatopenshift origin+1EPSS score5.54%
The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.CVE-2013-2103openshift cartridgeopenshift cartridge+1EPSS score0.96%
OpenShift cartridge allows remote URL retrievalCVE-2013-2186debianlibcommons-fileupload-java+7EPSS score12.67%
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.CVE-2013-0196openshiftopenshift enterprise+181EPSS score0.43%
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.CVE-2013-0163openshift haproxy cartridgeopenshift haproxy cartridge+1EPSS score0.30%
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoSCVE-2013-0165openshift mongodb cartridgeopenshift mongodb cartridge+1EPSS score0.81%
cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.CVE-2013-0164redhatopenshift+1EPSS score0.36%
The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.CVE-2013-4364redhatopenshiftEPSS score0.41%
(1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp.CVE-2013-4281redhatopenshiftEPSS score0.21%
In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file.CVE-2013-4253redhatopenshiftEPSS score0.73%
The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file.CVE-2013-4561redhatopenshiftEPSS score1.43%
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.CVE-2013-7370debiannode-connect+6EPSS score1.42%
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware