Unknown Atomic Openshift vulnerabilities

3 vulnerabilities

Known vulnerabilities in Unknown Atomic Openshift, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-10885redhatopenshift+1
EPSS score
1.62%
In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service (DoS) attack on an Openshift 3.9, or 3.7 Cluster.5CVE-2017-15138redhatopenshift_container_platform+1
EPSS score
0.90%
The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.5.3CVE-2017-15137redhatopenshift+2
EPSS score
0.99%
The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.