Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2016-8631

3: Router sometimes selects new routes over old routes when determining claimed hostnames

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.

CVSS 3.0 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2016-8628

ansible: Command injection by compromised server via fact variables

Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.

CVSS 3.0 · 7.6 High EPSS 3.2% KEV · Not listed
Vendors
Redhat
Products
Ansible Openshift
CVE-2016-7075

3: API server does not validate client-provided intermediate certificates correctly

It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.

CVSS 3.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Kubernetes Openshift
CVE-2016-1000232

nodejs-tough-cookie: regular expression DoS via Cookie header with many semicolons

NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.

CVSS 3.0 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Ibm Redhat Salesforce
Products
Api Connect Openshift Openshift Container Platform and 2 more
CVE-2015-8011

lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

CVSS 3.1 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Debian Fedoraproject Lldpd Project and 1 more
Products
Debian Linux Fedora Lldpd and 5 more
CVE-2015-1811

jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167)

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Cloudbees Openshift
CVE-2015-1809

jenkins: external entity injection via XPath (SECURITY-165)

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Cloudbees Openshift
CVE-2014-3592

Origin: XSS in team name

OpenShift Origin: Improperly validated team names could allow stored XSS attacks

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Origin
CVE-2014-0234

openshift-origin-broker: default password creation

The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.

CVSS 3.1 · 9.8 Critical EPSS 3.8% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2014-0163

Openshift: Multiple shell command injection flaws

Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2014-0084

rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service

Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Origin
CVE-2014-0068

node-util: world writable files

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift-origin-node-util
CVE-2014-0023

OpenShift: install script has temporary file creation vulnerability

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2013-5123

python-pip: insecure software download with mirroring support

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

CVSS 3.1 · 5.9 Medium EPSS 8.0% KEV · Not listed
Vendors
Debian Fedoraproject Pypa and 2 more
Products
Debian Linux Fedora Pip and 3 more
CVE-2013-4561

openshift-origin-msg-node-mcollective: /etc/cron.minutely/openshift-facts tmp file creation

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.

CVSS 3.1 · 9.1 Critical EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2013-4364

OpenShift: openshift-origin-broker-util incorrect temporary file usage

(1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2013-2103

cartridge: remote URL retrieval

OpenShift cartridge allows remote URL retrieval

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift