Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat:atomic-openshift:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat (a3686528-5679-55c9-b393-abe45df26bd2)
ProductAtomic Openshift (64429ea4-dbac-5712-b9bb-ef76791e04ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3889 vulnerable 2026-06-08 05:13:56.312138 Details available
MEDIUM (4.6)
A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11. An attacker could use this flaw to steal authorization data by getting them to click on a malicious link.
Published: 2019-07-11T18:27:40.000Z
Updated: 2024-08-04T19:19:18.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3884 vulnerable 2026-06-08 05:13:56.294348 Details available
LOW (3.6)
A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.
Published: 2019-08-01T13:20:50.000Z
Updated: 2024-08-04T19:19:18.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14632 vulnerable 2026-06-08 05:10:53.150478 Details available
HIGH (7.7)
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
Published: 2018-09-06T13:00:00.000Z
Updated: 2024-08-05T09:38:13.091Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.