Summary
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen, und um Informationen offenzulegen.
Product
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Vulnerabilities 2
-
High 8.8
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the …
-
High 7.5
Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. …
Revision history
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2026:28893 vom 2026-07-01
https://access.redhat.com/errata/RHSA-2026:28893
-
Red Hat Security Advisory RHSA-2026:28964 vom 2026-07-02
https://access.redhat.com/errata/RHSA-2026:28964
-
Red Hat Security Advisory RHSA-2026:26543 vom 2026-06-24
https://access.redhat.com/errata/RHSA-2026:26543
-
RedHat Customer Portal vom 2026-06-24
https://access.redhat.com/security/cve/cve-2026-1784
-
RedHat Customer Portal vom 2026-06-24
https://access.redhat.com/security/cve/cve-2026-35172
-
Red Hat Security Advisory RHSA-2026:26529 vom 2026-06-25
https://access.redhat.com/errata/RHSA-2026:26529
-
Red Hat Security Advisory RHSA-2026:70647 vom 2026-10-01
https://access.redhat.com/errata/RHSA-2026:70647