VendorsRed Hatopenshift_originany version
Vulnerabilities

Red Hat RedHat OpenShift Origin any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2016-2160
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
Published 2016-06-08 · Modified
9.0EPSS 0.041
CVE-2012-5646
node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.
Published 2013-02-24 · Modified
7.5EPSS 0.022
CVE-2014-3592
OpenShift Origin: Improperly validated team names could allow stored XSS attacks
Published 2019-11-13 · Modified
6.1EPSS 0.007
CVE-2012-5647
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
Published 2013-02-24 · Modified
5.8EPSS 0.015
CVE-2014-0084
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
Published 2019-11-21 · Modified
5.5EPSS 0.003
CVE-2016-3711
HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie.
Published 2016-06-08 · Modified
3.3EPSS 0.004