Openshift
6 CVEs across 5 Openshift products. Browse Openshift vulnerabilities, severities, and proof-of-concept exploits.
Openshift products with known CVEs
Openshift CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-4294 | Low | 2.6 | 2022-12-28 | A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipu… |
CVE-2015-3207 | Medium | 5.3 | 2022-07-07 | In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes. |
CVE-2020-10752 | High | 7.5 | 2020-06-12 | A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurr… |
CVE-2013-0196 | Medium | 6.5 | 2019-12-30 | A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. T… |
CVE-2014-0163 | High | 8.8 | 2019-12-11 | Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. |
CVE-2014-0023 | High | 7.8 | 2019-11-15 | OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution |
CVE-2015-8945 | Medium | 5.1 | 2016-08-05 | openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which al… |