Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift_container_platform:3.9.31:*:*:*:*:*:*:*

part: a version: 3.9.31 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOpenshift Container Platform (9ad0e47d-6be9-5586-9c65-14660705c34d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openshift/okd purl2cpe 2026-06-01 10:12:53.578258

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10843 vulnerable 2026-06-08 05:10:37.167874 Details available
HIGH (8.5)
source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
Published: 2018-07-02T17:00:00.000Z
Updated: 2024-08-05T07:46:46.958Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.