CVE-2016-3711

haproxy: Setting cookie containing internal IP address of a pod

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Openshift Openshift Origin

CVE-2016-3708

3: s2i builds implicitly perform docker builds

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that (1) contains ONBUILD commands or (2) does not contain a tar binary.

CVSS 3.0 · 7.1 High EPSS 1.1% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2014-0233

OpenShift: downloadable cartridge source url file command execution as root

Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.

CVSS 2.0 · 6.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2016-3703

3: Untrusted content loaded via the API proxy can access web console credentials on the same domain

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.

CVSS 3.0 · 5.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2014-0188

OpenShift: openshift-origin-broker plugin allows impersonation

The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers to bypass authentication and impersonate arbitrary users via the X-Remote-User header in a request to a passthrough trigger.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2016-2160

Privilege escalation when changing root password in sti builder image

Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.

CVSS 3.0 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Redhat

Products

Openshift Openshift Origin

CVE-2016-2149

3: logs from a deleted namespace can be revealed if a new namespace with the same name is created

Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2016-2142

openshift: Bind password for AD account is stored in world readable file

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2016-2074

openvswitch: MPLS buffer overflow vulnerability

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.

CVSS 3.0 · 9.8 Critical EPSS 6.4% KEV · Not listed

Vendors

Openvswitch Redhat

Products

Openvswitch Openshift Openstack

CVE-2016-1906

server: build config to a strategy that isn't allowed by policy

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

CVSS 3.0 · 9.8 Critical EPSS 4.8% KEV · Not listed

Vendors

Kubernetes Redhat

Products

Kubernetes Openshift

CVE-2014-0164

mcollective: world readable client config

openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2016-1905

server: patch operation should use patched object to check admission control

The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.

CVSS 3.0 · 7.7 High EPSS 1.6% KEV · Not listed

Vendors

Kubernetes Redhat

Products

Kubernetes Openshift

CVE-2016-0792

jenkins: Remote code execution through remote API (SECURITY-247)

Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

CVSS 3.0 · 8.8 High EPSS 83.3% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2016-0791

jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245)

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2014-0003

Camel: remote code execution via XSL

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

CVSS 2.0 · 7.5 High EPSS 7.5% KEV · Not listed

Vendors

Apache Redhat

Products

Camel Fuse Esb Enterprise Fuse Management Console and 7 more

CVE-2016-0790

jenkins: Non-constant time comparison of API token (SECURITY-241)

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.

CVSS 3.0 · 5.3 Medium EPSS 2.1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2016-0789

jenkins: HTTP response splitting vulnerability (SECURITY-238)

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.8% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2016-0788

jenkins: Remote code execution vulnerability in remoting module (SECURITY-232)

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

CVSS 3.0 · 9.8 Critical EPSS 11.8% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2013-7330

jenkins: configure a project you do not have access to (SECURITY-55)

Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.

CVSS 2.0 · 4.0 Medium EPSS 1.6% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-8103

jenkins: Remote code execution vulnerability due to unsafe deserialization in Jenkins remoting (SECURITY-218)

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".

CVSS 3.1 · 9.8 Critical EPSS 91.9% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift Openshift Container Platform