8.8
Élevée
CVE-2026-1784 The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy
Description
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.19 1780043338 | premières → < 1780043338 | 1780043338 |
| Red Hat OpenShift Container Platform 4.21 1780444348 | premières → < 1780444348 | 1780444348 |
| Red Hat OpenShift Container Platform 4.20 1780990977 | premières → < 1780990977 | 1780990977 |
| Red Hat OpenShift Container Platform 4.18 1780988280 | premières → < 1780988280 | 1780988280 |
| Red Hat OpenShift Container Platform 4.16 1780962617 | premières → < 1780962617 | 1780962617 |
| Red Hat OpenShift Container Platform 4.13 1781123014 | premières → < 1781123014 | 1781123014 |
| Red Hat OpenShift Container Platform 4.14 1781870101 | premières → < 1781870101 | 1781870101 |
| Red Hat OpenShift Container Platform 4.15 1781928857 | premières → < 1781928857 | 1781928857 |
Afficher les 2 autres branches Masquer les 2 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift Container Platform 4.2 1780990977 | premières → < 1780990977 | 1780990977 |
| Red Hat OpenShift Container Platform 4.12 1789911929 | premières → < 1789911929 | 1789911929 |
Références
- RHSA-2026:23241 access.redhat.com
- RHSA-2026:23246 access.redhat.com
- RHSA-2026:25045 access.redhat.com
- RHSA-2026:25182 access.redhat.com
- RHSA-2026:25194 access.redhat.com
- RHSA-2026:26543 access.redhat.com
- RHSA-2026:28893 access.redhat.com
- RHSA-2026:28964 access.redhat.com
- RHSA-2026:70647 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2436075 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift Container Platform 4
Les 629 CVE de Red Hat OpenShift Container Platform 4 →
CVE-2026-82976
Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret
7.1
Élevée
CVE-2026-120831
Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
6.5
Moyenne
CVE-2026-120830
Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
7.4
Élevée
CVE-2026-120194
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
7.5
Élevée