Openshift enterprise

This hub aggregates every CVE we track for Openshift enterprise, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 4 most recently published vulnerabilities affecting Openshift enterprise.

• CVE-2013-0196A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain th...6.5Dec 30, 2019
• CVE-2016-8651An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have acces...3.1Aug 1, 2018
• CVE-2016-8631The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect n...6.3Jul 31, 2018
• CVE-2018-1069Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read ...7.1Mar 9, 2018