Advisories · Technology

Red Hat OpenShift Container Platform 3.11.

Every CVE that names Red Hat OpenShift Container Platform 3.11 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7128 CVE record

CVSS 5.3 Medium

Openshift-console: unauthenticated data exposure
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Information disclosure
Not analysed yet 26 Jul 2024
CVE-2024-7079 CVE record

CVSS 6.5 Medium

Openshift-console: unauthenticated installation of helm charts
- Red Hat OpenShift Container Platform 3.11
- Red Hat OpenShift Container Platform 4
- Authentication bypass
Not analysed yet 24 Jul 2024
CVE-2023-3966 CVE record

CVSS 7.5 High

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
- openvswitch
- Red Hat Fast Datapath for RHEL 7
- CWE-248
Not analysed yet 22 Feb 2024
CVE-2024-0567 CVE record

CVSS 7.5 High

Gnutls: rejects certificate chain with distributed trust
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.2 Extended Update Support
- Weak cryptography or TLS
Not analysed yet 16 Jan 2024
CVE-2023-5366 CVE record

CVSS 7.1 High

Openvswitch don't match packets on nd_target field
- openvswitch
- Red Hat Fast Datapath for RHEL 7
- CWE-345
Not analysed yet 6 Oct 2023
CVE-2022-3248 CVE record

CVSS 4.4 Medium

Openshift api admission checks does not enforce "custom-host" permissions
- kubernetes
- Red Hat Advanced Cluster Management for Kubernetes 2
- Broken access control
Not analysed yet 5 Oct 2023
CVE-2022-3466 CVE record

CVSS 4.8 Medium

Cri-o: security regression of cve-2022-27652
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 3.11
- Broken access control
Not analysed yet 15 Sept 2023
CVE-2023-3089 CVE record

CVSS 7.0 High

Ocp & fips mode
- openshift
- Red Hat OpenShift Serverless
- CWE-693
Not analysed yet 5 Jul 2023