openshift github.com/openshift/origin vulnerabilities

Latest openshift github.com/openshift/origin CVEs

Newest publication first

1. CVE-2015-3207 Insecure cookies in Openshift Origin

   Published 2022-07-07

   Medium·CVSS 5.3 EPSS 0.76%

   In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

2. CVE-2015-8945 openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive priv...

   Published 2016-08-05

   Medium·CVSS 5.1

   openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

3. CVE-2016-1906 Authorization bypass in Openshift

   Published 2016-02-03

   Critical·CVSS 9.8 EPSS 4.8%

   Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

4. CVE-2015-5250 Denial of Service in OpenShift Origin

   Published 2015-09-08

   Medium·CVSS 4.0 EPSS 2.0%

   The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.