CVE-2018-1070

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2018-06-12

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Openshift Container Platform (Redhat)
• Routing (Unknown)

References

• https://access.redhat.com/errata/RHSA-2018:2013
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1070