Aller au contenu
en Se connecter
7.1 Élevée

CVE-2026-96577 A flaw was found in oc-mirror

Description

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.

Produits et versions touchés

Produit Versions touchées Corrigé en
Assisted Installer for Red Hat OpenShift Container Platform 2 Versions non publiées
Red Hat OpenShift Container Platform 4 Versions non publiées
Red Hat OpenShift Container Platform 4.21 1790777129 premières → < 1790777129 1790777129
Red Hat OpenShift Container Platform 4.22 1790775357 premières → < 1790775357 1790775357
Red Hat OpenShift Container Platform 4.20 1790782357 premières → < 1790782357 1790782357
Red Hat OpenShift Container Platform 4.19 1790778095 premières → < 1790778095 1790778095
Red Hat OpenShift Container Platform 4.18 1790828598 premières → < 1790828598 1790828598

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Assisted Installer for Red Hat OpenShift Container Platform 2

Les 27 CVE de Assisted Installer for Red Hat OpenShift Container Platform 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-101295 Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction 7.3 Élevée CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique
Suivre cette CVE