3 results · Feed
-
Medium 5.3
Insecure cookies in Openshift Origin
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
-
Critical 9.8
Authorization bypass in Openshift
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
-
Medium 4.3
Denial of Service in OpenShift Origin
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.