Red Hat Openshift 4.6.52

CPE Details

Red Hat Openshift 4.6.52
redhat
openshift
4.6.52
2022-08-26
15h26 +00:00
2022-08-26
16h39 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:redhat:openshift:4.6.52:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

openshift

Version

4.6.52

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-3636 2021-07-30 17h27 +00:00 It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.
4.6
Medium
CVE-2020-35514 2021-06-02 11h22 +00:00 An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShift cluster. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects versions before openshift4/ose-machine-config-operator v4.7.0-202105111858.p0.
7
High