OO
Product
Openshift Origin
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch
Add Openshift Origin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2160 | 8.8 | Jun 8 | Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder… Affected: All versions, or not specified |
| CVE-2014-3592 | 6.1 | Nov 13 | OpenShift Origin: Improperly validated team names could allow stored XSS attacks Affected: through 2014-08-13 |
| CVE-2014-0084 | 5.5 | Nov 21 | Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly Affected: before 2014-02-14 |
| CVE-2016-3711 | 3.3 | Jun 8 | HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID"… Affected: All versions, or not specified |
| CVE-2015-5250 | – | Sep 8 | The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data Affected: 1.0.5 |
| CVE-2014-3496 | – | Jun 20 | cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url… Affected: 1.2.8; 2.1; 2.1.1 |
| CVE-2013-0164 | – | Feb 24 | The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a… Affected: 1.0.5 |
| CVE-2012-5658 | – | Feb 24 | rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent… Affected: 1.0.5 |
| CVE-2012-5647 | – | Feb 24 | Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and… Affected: through 1.0.5 |
| CVE-2012-5646 | – | Feb 24 | node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO Affected: through 1.0.5 |
Showing 10