Red Hat OpenShift Container Platform 4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*
part: a version: 4.2 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift Container Platform (9ad0e47d-6be9-5586-9c65-14660705c34d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openshift/okd |
purl2cpe | 2026-06-01 10:12:53.597485 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8945 |
vulnerable | 2026-06-08 05:27:20.001989 |
Details available
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
Published: 2020-02-12T17:20:43.000Z
Updated: 2024-08-04T10:12:10.975Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1760 |
vulnerable | 2026-06-08 05:21:02.994250 |
Details available
MEDIUM (5.8)
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
Published: 2020-04-23T00:00:00.000Z
Updated: 2024-08-04T06:46:30.894Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1708 |
vulnerable | 2026-06-08 05:21:02.842117 |
Details available
HIGH (7)
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.
Published: 2020-02-07T20:37:26.000Z
Updated: 2024-08-04T06:46:30.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1706 |
vulnerable | 2026-06-08 05:21:02.838324 |
Details available
HIGH (7)
It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/apb-tools-container.
Published: 2020-03-09T00:00:00.000Z
Updated: 2024-08-04T06:46:30.091Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9514 |
vulnerable | 2026-06-08 05:14:25.640341 |
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service
HIGH (7.5)
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
Published: 2019-08-13T00:00:00.000Z
Updated: 2024-08-04T21:54:44.511Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3889 |
vulnerable | 2026-06-08 05:13:56.314636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19921 |
vulnerable | 2026-06-08 05:13:24.048522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16884 |
vulnerable | 2026-06-08 05:13:09.473101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16276 |
vulnerable | 2026-06-08 05:13:08.094261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14891 |
vulnerable | 2026-06-08 05:12:56.361440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14854 |
vulnerable | 2026-06-08 05:12:56.273244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13734 |
vulnerable | 2026-06-08 05:12:52.331481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11255 |
vulnerable | 2026-06-08 05:12:36.769267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10223 |
vulnerable | 2026-06-08 05:12:22.814306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10213 |
vulnerable | 2026-06-08 05:12:22.530284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12207 |
vulnerable | 2026-06-08 05:10:41.186827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.