Search vulnerabilities

Results 2

Export CSV
CVE-2015-8945

openshift-origin: Logging of private RSA keys into systemd journal

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

CVSS 3.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2015-3207

github.com/openshift/origin: Insecure cookies in Openshift Origin in github.com/openshift/origin

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products