GCVE - cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*

part: a version: 3.4 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openshift (`c1e101a6-4198-51dc-8dd3-fad3fe32c7b8`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openshift/okd`	purl2cpe	2026-06-01 10:12:54.190791

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-1102`	vulnerable	2026-06-08 05:11:16.904562	Details available A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation. Published: 2018-04-30T19:00:00.000Z Updated: 2024-08-05T03:51:49.044Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2018:1235 https://access.redhat.com/errata/RHSA-2018:1241 https://access.redhat.com/errata/RHSA-2018:1233 https://access.redhat.com/errata/RHSA-2019:0036 https://access.redhat.com/errata/RHSA-2018:1237	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7534`	vulnerable	2026-06-08 05:09:56.462640	Details available OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod. Published: 2018-04-11T19:00:00.000Z Updated: 2024-08-05T16:04:11.828Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103754 https://bugzilla.redhat.com/show_bug.cgi?id=1443003	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9592`	vulnerable	2026-06-08 05:08:24.091128	Details available MEDIUM (4.3) openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit. Published: 2018-04-16T14:00:00.000Z Updated: 2024-08-06T02:59:02.472Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9592 http://www.securityfocus.com/bid/94991	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.