Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2022-20612

jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Jenkins Oracle Redhat
Products
Jenkins Communications Cloud Native Core Automated Test Suite Openshift
CVE-2022-1708

cri-o: memory exhaustion on the node when access to the kube api

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Fedoraproject Kubernetes Redhat
Products
Fedora Cri-o Enterprise Linux and 2 more
CVE-2022-1706

ignition: configs are accessible from unprivileged containers in VMs running on VMware products

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data confidentiality. Possible workaround is to not put secrets in the Ignition config.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Enterprise Linux Ignition and 2 more
CVE-2022-1677

openshift/router: route hijacking attack via crafted HAProxy configuration file

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the cluster, and direct traffic to an arbitrary application within the cluster, including one under attacker control.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Container Platform
CVE-2022-1632

Openshift: ClusterIP Service TLS certificate not checked by route controller if re-encrypt Route destinationCACertificate field is explicitly set to default serviceCA

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Ansible Automation Platform Openshift Container Platform
CVE-2022-1319

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Cloud Secure Agent Oncommand Insight and 8 more
CVE-2022-1274

keycloak: HTML injection in execute-actions-email Admin REST API

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux For Ibm Z Systems Enterprise Linux For Ibm Z Systems Eus and 7 more
CVE-2022-1259

undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629)

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Cloud Secure Agent Oncommand Insight and 9 more
CVE-2022-1227

psgo: Privilege escalation in 'podman top'

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

CVSS 3.1 · 8.8 High EPSS 4.2% KEV · Not listed
Vendors
Fedoraproject Podman Project Psgo Project and 1 more
Products
Fedora Podman Psgo and 16 more
CVE-2022-1025

Openshift-Gitops: Improper access control allows admin privilege escalation

All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Argoproj Redhat
Products
Argo Cd Openshift Gitops
CVE-2022-0811

CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter

A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.

CVSS 3.1 · 8.8 High EPSS 19.0% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Cri-o Openshift
CVE-2022-0718

python-oslo-utils: incorrect password masking in debug output

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Openstack Redhat
Products
Debian Linux Oslo.utils Openshift Container Platform and 2 more
CVE-2022-0711

haproxy: Denial of service via set-cookie2 header

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.

CVSS 3.1 · 7.5 High EPSS 16.6% KEV · Not listed
Vendors
Debian Haproxy Redhat
Products
Debian Linux Haproxy Enterprise Linux and 3 more
CVE-2022-0669

dpdk: sending vhost-user-inflight type messages could lead to DoS

A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dpdk Openvswitch Redhat
Products
Data Plane Development Kit Openvswitch Enterprise Linux and 1 more
CVE-2022-0567

ovn-kubernetes: Ingress network policy can be overruled by egress network policy on another pod

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.

CVSS 3.1 · 9.1 Critical EPSS 1.0% KEV · Not listed
Vendors
Ovn Redhat
Products
Ovn-kubernetes Openshift
CVE-2022-0532

cri-o: pod with access to 'hostIPC' and 'hostNetwork' kernel namespace allows sysctl from the list of safe sysctls to be applied to the host

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Cri-o Openshift Openshift Container Platform
CVE-2021-4294

OpenShift OSIN CheckClientSecret timing discrepancy

A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 8612686d6dda34ae9ef6b5a974e4b7accb4fea29. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216987.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Container Platform Openshift Osin
CVE-2021-4178

kubernetes-client: Insecure deserialization in unmarshalYaml method

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
A-mq Streams Amq Streams Build Of Quarkus and 10 more
CVE-2021-4125

kube-reporting/hive: Incomplete fix for log4j CVE-2021-44228 and CVE-2021-45046

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.

CVSS 3.1 · 8.1 High EPSS 1.6% KEV · Not listed
Vendors
Redhat
Products
Openshift