Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:atomic-openshift:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAtomic Openshift (acea1adf-96d3-57a0-82a6-fa8be09c4884)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10176 vulnerable 2026-06-08 05:12:22.433611 Details available
MEDIUM (4.2)
A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.
Published: 2019-08-02T13:51:09.000Z
Updated: 2024-08-04T22:10:09.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10150 vulnerable 2026-06-08 05:12:22.342083 Details available
MEDIUM (5.9)
It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.
Published: 2019-06-12T13:42:36.000Z
Updated: 2024-08-04T22:10:10.023Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.