Skip to content

Known vulnerabilities in Red Hat OpenShift

Is your version affected?

CVE Summary Score Published
CVE-2019-19355 An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk 7.0 High Mar 18, 2020
CVE-2019-19351 An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins 7.0 High Mar 18, 2020
CVE-2019-10213 OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level… 5.3 Medium Nov 25, 2019
CVE-2019-14845 A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3 5.7 Medium Oct 8, 2019
CVE-2019-10165 OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the… 2.3 Low Jul 30, 2019
CVE-2016-7075 It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate… 7.5 High Sep 10, 2018
CVE-2017-12195 A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin 6.5 Medium Jul 27, 2018

Other Red Hat products