Skip to content
OpenAdvisories
Medium RHSA-2020:2440 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.3.25 openshift security update

Published Sep 18, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.3::el7 openshift 0:4.3.25-202006060952.git.1.96c30f6.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-hyperkube 0:4.3.25-202006060952.git.1.96c30f6.el7
Red Hat · OpenShift 4 openshift:4.3::el8 openshift 0:4.3.25-202006060952.git.1.96c30f6.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-hyperkube 0:4.3.25-202006060952.git.1.96c30f6.el8

Vulnerabilities 1

  • Medium 6.3
    CVE-2020-8555

    Kubernetes kube-controller-manager SSRF

    The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary in…

    Kubernetes Kubernetes kubernetes k8s.io/kubernetes Debian Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1821583
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2440.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8555
  • article
    https://groups.google.com/forum/#!topic/kubernetes-security-announce/kEK27tqqs30