Red Hat Openshift 4.9
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift:4.9:*:*:*:*:*:*:*
part: a version: 4.9 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift (c1e101a6-4198-51dc-8dd3-fad3fe32c7b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openshift/okd |
purl2cpe | 2026-06-01 10:12:54.197007 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-3262 |
vulnerable | 2026-06-08 05:47:19.813907 |
Details available
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
Published: 2022-12-08T00:00:00.000Z
Updated: 2025-04-23T15:19:14.027Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3260 |
vulnerable | 2026-06-08 05:47:19.810130 |
Details available
The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these results incorrectly, allowing clickjacking attacks.
Published: 2022-12-08T00:00:00.000Z
Updated: 2025-04-23T15:29:37.556Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3259 |
vulnerable | 2026-06-08 05:47:19.809682 |
Details available
Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.
Published: 2022-12-09T00:00:00.000Z
Updated: 2025-04-22T20:25:52.328Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4047 |
vulnerable | 2026-06-08 05:38:08.231300 |
Details available
The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue only affects Red Hat OpenShift 4.9.
Published: 2022-04-11T19:38:31.000Z
Updated: 2024-08-03T17:16:03.305Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.