Skip to content
Sign in
5.9 Medium

CVE-2019-10150 It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when…

Description

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Affected products and versions

Product Affected versions Fixed in
atomic-openshift Versions not published

Other CVEs of atomic-openshift

The 2 CVEs of atomic-openshift →
CVE-2019-10176 A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the… 4.2 Medium
Track this CVE