CVE-2017-15137

atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag

Published Jul 16, 2018 CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Description
The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-6597 The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 7:50 PM
Reserved
Oct 8, 2017, 12:00 AM
Status
Modified
Published
Jul 16, 2018, 8:29 PM
Modified
Jun 17, 2026, 1:07 AM
Severity
Moderate
Public date
Mar 28, 2018, 12:00 AM