Red Hat OpenShift Container Platform 4.11

4 results · Clear filters · Feed

• High 7.5
  CVE-2023-6596

  Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)

  An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.12 Red Hat OpenShift Container Platform 4.11
  Apr 25, 2024
• High 7.2
  CVE-2023-5408

  Openshift: modification of node role labels

  A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker node…

  Red Hat Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.13 Red Hat OpenShift Container Platform 4.12 Azure Linux
  Nov 2, 2023
• High 7.8
  CVE-2022-4318

  Cri-o: /etc/passwd tampering privesc

  A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

  Red Hat Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4.12 Red Hat OpenShift Container Platform 4.11 Linux Azure Linux Alpine Go
  Sep 25, 2023
• High 8.0
  CVE-2023-1260

  Kube-apiserver: privesc

  An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would t…

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.13 Go
  Sep 24, 2023