CVE-2019-3818: Kube-Rbac-Proxy Project Kube-Rbac-Proxy

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.

Affected products

• Kube-Rbac-Proxy Project Kube-Rbac-Proxy: before 0.4.1 (fixed in 0.4.1)
• Red Hat Openshift Container Platform: version 3.11 only

Published 2019-02-05. Last modified 2026-06-17.