RedHatRHSA-2019:3942(RHSA-2019:3942) Low: OpenShift Container Platform 4.1.24 openshift security update
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
EPSS
Percentile
33.1%
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the openshift container images for Red Hat OpenShift
Container Platform 4.1.24.
Security Fix(es):
- A flaw was found in kubectl that leaves http-cache files with read/write permissions for any user. In conjunction with a non-default value for --cache-dir, this could lead to the cache content being placed in a location accessible to other users in the system. (CVE-2019-11244)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | openshift-clients-redistributable | < 4.1.24-201911080309.git.0.c41acf2.el7 | openshift-clients-redistributable-4.1.24-201911080309.git.0.c41acf2.el7.x86_64.rpm |
| RedHat | 8 | x86_64 | openshift-hyperkube | < 4.1.24-201911080309.git.0.c41acf2.el8 | openshift-hyperkube-4.1.24-201911080309.git.0.c41acf2.el8.x86_64.rpm |
| RedHat | 8 | x86_64 | openshift-clients | < 4.1.24-201911080309.git.0.c41acf2.el8 | openshift-clients-4.1.24-201911080309.git.0.c41acf2.el8.x86_64.rpm |
| RedHat | 7 | x86_64 | openshift-clients | < 4.1.24-201911080309.git.0.c41acf2.el7 | openshift-clients-4.1.24-201911080309.git.0.c41acf2.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | openshift-hyperkube | < 4.1.24-201911080309.git.0.c41acf2.el7 | openshift-hyperkube-4.1.24-201911080309.git.0.c41acf2.el7.x86_64.rpm |
| RedHat | 8 | x86_64 | openshift-clients-redistributable | < 4.1.24-201911080309.git.0.c41acf2.el8 | openshift-clients-redistributable-4.1.24-201911080309.git.0.c41acf2.el8.x86_64.rpm |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
EPSS
Percentile
33.1%