Aller au contenu
en Se connecter
9.4 Critique

CVE-2026-16242 A flaw was found in the Konnectivity proxy-server configuration for hosted control planes

Description

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

Produits et versions touchés

Produit Versions touchées Corrigé en
Logging Subsystem for Red Hat OpenShift Versions non publiées
Multicluster Engine for Kubernetes Versions non publiées
OpenShift API for Data Protection Versions non publiées
Red Hat Advanced Cluster Management for Kubernetes 2 Versions non publiées
Red Hat OpenShift Container Platform 4 Versions non publiées
multicluster engine for Kubernetes 2.10 1784905766 premières → < 1784905766 1784905766
multicluster engine for Kubernetes 2.8 1784905783 premières → < 1784905783 1784905783
multicluster engine for Kubernetes 2.9 1784905769 premières → < 1784905769 1784905769
multicluster engine for Kubernetes 2.11 1784945966 premières → < 1784945966 1784945966
Afficher les 15 autres branches
Produit Versions touchées Corrigé en
multicluster engine for Kubernetes 2.6 1784905804 premières → < 1784905804 1784905804
multicluster engine for Kubernetes 2.17 1784856942 premières → < 1784856942 1784856942
multicluster engine for Kubernetes 2.1 1784905766 premières → < 1784905766 1784905766
multicluster engine for Kubernetes 2.11.0 1784945966 premières → < 1784945966 1784945966
Red Hat OpenShift Container Platform 4.22 1785192936 premières → < 1785192936 1785192936
Red Hat OpenShift Container Platform 4.20 1785288843 premières → < 1785288843 1785288843
Red Hat OpenShift Container Platform 4.21 1785301941 premières → < 1785301941 1785301941
Red Hat OpenShift Container Platform 4.19 1784913720 premières → < 1784913720 1784913720
Red Hat OpenShift Container Platform 4.18 1784912882 premières → < 1784912882 1784912882
Red Hat OpenShift Container Platform 4.17 1784914869 premières → < 1784914869 1784914869
Red Hat OpenShift Container Platform 4.2 1785288843 premières → < 1785288843 1785288843
multicluster engine for Kubernetes 2.9.0 1784905769 premières → < 1784905769 1784905769
Red Hat OpenShift Container Platform 4.16 1785534428 premières → < 1785534428 1785534428
Red Hat OpenShift Container Platform 4.14 1787001690 premières → < 1787001690 1787001690
Red Hat OpenShift Container Platform 4.15 1787055132 premières → < 1787055132 1787055132

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Logging Subsystem for Red Hat OpenShift

Les 78 CVE de Logging Subsystem for Red Hat OpenShift →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 Élevée CVE-2026-10609 A missing authorization flaw was found in the OpenShift Cluster Logging Operator 6.8 Moyenne CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne
Suivre cette CVE