GCVE - cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*

part: a version: 3.11 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openshift (`c1e101a6-4198-51dc-8dd3-fad3fe32c7b8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openshift/okd`	purl2cpe	2026-06-01 10:12:54.190781

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-1709`	vulnerable	2026-06-08 05:21:02.845278	Details available HIGH (7) A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Published: 2020-03-20T00:00:00.000Z Updated: 2024-08-04T06:46:30.193Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1709	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10715`	vulnerable	2026-06-08 05:16:35.721581	Details available A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft a URL and inject arbitrary text onto the error page that appears to be from the OpenShift instance. This attack could potentially convince a user that the inserted text is legitimate. Published: 2020-09-16T18:00:27.000Z Updated: 2024-08-04T11:14:14.279Z Open on db.gcve.eu Reference links https://github.com/openshift/origin-web-console/pull/3173 https://bugzilla.redhat.com/show_bug.cgi?id=1767665	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3884`	vulnerable	2026-06-08 05:13:56.299402	Details available LOW (3.6) A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected. Published: 2019-08-01T13:20:50.000Z Updated: 2024-08-04T19:19:18.666Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3884	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19351`	vulnerable	2026-06-08 05:13:22.193327	Details available HIGH (7) An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11. Published: 2020-03-18T16:33:50.000Z Updated: 2024-08-05T02:16:47.395Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19350`	vulnerable	2026-06-08 05:13:22.191856	Details available An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Published: 2021-03-24T15:36:09.000Z Updated: 2024-08-05T02:16:47.049Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1791534 https://bugzilla.redhat.com/show_bug.cgi?id=1793283	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19345`	vulnerable	2026-06-08 05:13:22.186266	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.