Red Hat OpenShift Container Platform 4.3
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift_container_platform:4.3:*:*:*:*:*:*:*
part: a version: 4.3 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift Container Platform (9ad0e47d-6be9-5586-9c65-14660705c34d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openshift/okd |
purl2cpe | 2026-06-01 10:12:53.597486 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8945 |
vulnerable | 2026-06-08 05:27:20.002708 |
Details available
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
Published: 2020-02-12T17:20:43.000Z
Updated: 2024-08-04T10:12:10.975Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1726 |
vulnerable | 2026-06-08 05:21:02.896861 |
Details available
MEDIUM (5.9)
A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the first time, it is possible to trigger the flaw and overwrite files in the volume.This issue was introduced in version 1.6.0.
Published: 2020-02-11T19:45:26.000Z
Updated: 2024-08-04T06:46:30.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1708 |
vulnerable | 2026-06-08 05:21:02.842140 |
Details available
HIGH (7)
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.
Published: 2020-02-07T20:37:26.000Z
Updated: 2024-08-04T06:46:30.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1706 |
vulnerable | 2026-06-08 05:21:02.839188 |
Details available
HIGH (7)
It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/apb-tools-container.
Published: 2020-03-09T00:00:00.000Z
Updated: 2024-08-04T06:46:30.091Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14892 |
vulnerable | 2026-06-08 05:12:56.365650 |
Details available
HIGH (7.5)
A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.
Published: 2020-03-02T16:28:40.000Z
Updated: 2024-08-05T00:26:39.136Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.