CVE-2017-15137

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

Score

CVSS 3.0 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2018-07-16

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Openshift (Redhat)
• Openshift Container Platform (Redhat)
• Atomic-openshift (Unknown)

References

• https://access.redhat.com/errata/RHBA-2018:0489
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15137