Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2018-1000406

jenkins: Arbitrary file write vulnerability using file parameter definitions

A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.

CVSS 3.0 · 6.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-1000400

cri-o: capabilities are not dropped when switching to a non-root user

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Cri-o Openshift
CVE-2018-1000169

jenkins: CLI leaked existence of views and agents with attacker-specified names to users without Overall/Read permission (SECURITY-754)

An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.

CVSS 3.0 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-0503

$wgRateLimits entry for 'user' overrides 'newbie'

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

CVSS 3.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Mediawiki Redhat
Products
Debian Linux Mediawiki Openshift
CVE-2017-7534

openshift: XSS in log viewer for a pod

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2017-7481

ansible: Security issue with lookup return not tainting the jinja2 environment

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Canonical Debian Redhat
Products
Ubuntu Linux Debian Linux Ansible Engine and 11 more
CVE-2017-7466

ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587)

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

CVSS 3.0 · 8 High EPSS 3.0% KEV · Not listed
Vendors
Redhat
Products
Ansible Openshift Openstack and 3 more
CVE-2017-2611

jenkins: Insufficient permission check for periodic processes (SECURITY-389)

Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2017-18367

libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Libseccomp-golang Project Redhat
Products
Libseccomp-golang Openshift
CVE-2017-15138

atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project

The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.

CVSS 3.0 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Container Platform
CVE-2017-15137

atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Container Platform
CVE-2017-12195

3: authentication bypass for elasticsearch with external routes

A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Container Platform
CVE-2017-1002102

kubernetes: Malicious containers can delete any file from the node

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

CVSS 3.0 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Kubernetes Openshift
CVE-2017-1002101

kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.

CVSS 3.0 · 8.8 High EPSS 13.3% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Kubernetes Openshift
CVE-2016-9592

openshift: Failing to detach a volume causes DoS by retrying to perform delete

openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2016-9587

Ansible: Compromised remote hosts can lead to running commands on the Ansible controller

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

CVSS 3.1 · 8.1 High EPSS 17.0% KEV · Not listed
Vendors
Ansible Redhat
Products
Ansible Ansible Openshift and 4 more
CVE-2016-8651

3: Pulling of any image is possible with it manifest

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

CVSS 3.0 · 3.1 Low EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Container Platform