5.9
Medium
CVE-2019-10150 It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when…
Description
It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| atomic-openshift | Versions not published |
References
- docs.openshift.com docs.openshift.com
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2019:2989 access.redhat.com
- RHSA-2019:3007 access.redhat.com
- RHSA-2019:3143 access.redhat.com
- RHSA-2019:3811 access.redhat.com
Timeline
- Published
- Last modified