5.7
Medium
CVE-2019-14845 A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3
Description
A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification. An attacker can take advantage of this flaw by launching a man-in-the-middle attack and injecting malicious content.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenShift | Versions not published |
Other CVEs of OpenShift
The 7 CVEs of OpenShift →
CVE-2019-19355
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk
7.0
High
CVE-2019-19351
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins
7.0
High
CVE-2019-10213
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level…
5.3
Medium
CVE-2019-10165
OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the…
2.3
Low