Advisories · Technology
Red Hat OpenShift Container Platform 4.21.
Every CVE that names Red Hat OpenShift Container Platform 4.21 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- Privilege escalation
- CVSS 7.7 High
Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Privilege escalation
- CVSS 6.8 Medium
Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- Privilege escalation
- CVSS 7.1 High
Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenShift Container Platform 4.19
- Authentication bypass
- CVSS 6.1 Medium
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Open redirect
- CVSS 7.1 High
Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- CWE-829
- CVSS 7.5 High
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Path traversal
- CVSS 7.2 High
Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- CWE-441
- CVSS 9.3 CriticalCritical · CVSS 9+
Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Denial of service
- CVSS 7.4 High
Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 8.5 High
Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-436
- CVSS 9.4 CriticalCritical · CVSS 9+
Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11
- Authentication bypass
- CVSS 7.8 High
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Memory corruption
- CWE-116
- CVSS 7.5 High
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.8 High
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-15
- CVSS 7.7 High
Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Authentication bypass
- CVSS 7.1 High
Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS