Openshift - vulnerabilities (CVEs)

7 CVEs in 5 products, 0 in the last 30 days, newest from 2022-12-28.

Products

CVE-2021-4294 - CVSS 5.9 (medium), 2022-12-28: A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The…
CVE-2015-3207 - CVSS 5.3 (medium), 2022-07-07: In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
CVE-2020-10752 - CVSS 7.5 (high), 2020-06-12: A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic…
CVE-2013-0196 - CVSS 6.5 (medium), 2019-12-30: A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism.…
CVE-2014-0163 - CVSS 8.8 (high), 2019-12-11: Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.
CVE-2014-0023 - CVSS 7.8 (high), 2019-11-15: OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
CVE-2015-8945 - CVSS 5.1 (medium), 2016-08-05: openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which…