Red Hat Openshift Container Platform 3.11 vulnerabilities

8 CVEs affecting Red Hat Openshift Container Platform 3.11, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-7631, published 2025-03-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-3154, published 2024-04-26. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the…
CVE-2024-3727, published 2024-05-14. High severity, CVSS 8.3. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion,…
CVE-2024-11831, published 2025-02-10. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object…
CVE-2024-1139, published 2024-04-25. High severity, CVSS 7.7. EPSS: 0.9% chance of exploitation in the next 30 days. A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a…
CVE-2024-8676, published 2024-11-26. High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the…
CVE-2024-7631, published 2025-03-19. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a…
CVE-2024-1753, published 2024-03-18. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a…
CVE-2024-7128, published 2024-07-26. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler() and authHandlerWithUser() middleware functions. When the default authentication provider…