Red Hat Openshift Origin vulnerabilities
10 CVEs affecting Red Hat Openshift Origin, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0084, published 2019-11-21.
More from Red Hat.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2014-3496, published 2014-06-20. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a (1)…
- CVE-2016-2160, published 2016-06-08. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
- CVE-2012-5646, published 2013-02-24. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.
- CVE-2015-5250, published 2015-09-08. Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days. The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.
- CVE-2012-5647, published 2013-02-24. Medium severity, CVSS 5.8. EPSS: 1.5% chance of exploitation in the next 30 days. Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…
- CVE-2014-3592, published 2019-11-13. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. OpenShift Origin: Improperly validated team names could allow stored XSS attacks
- CVE-2013-0164, published 2013-02-24. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a…
- CVE-2012-5658, published 2013-02-24. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent attackers to obtain…
- CVE-2016-3711, published 2016-06-08. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie.
- CVE-2014-0084, published 2019-11-21. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.