Skip to content
Sign in
4.3 Medium

CVE-2017-15137 The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag",…

Description

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

Affected products and versions

Product Affected versions Fixed in
atomic-openshift Versions not published

Other CVEs of atomic-openshift

The 3 CVEs of atomic-openshift →
CVE-2017-15138 The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges… 5.0 Medium CVE-2018-10885 In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to… 6.5 Medium
Track this CVE