Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2019:4052
HistoryDec 16, 2019 - 1:47 p.m.

(RHSA-2019:4052) Moderate: OpenShift Container Platform 3.11 atomic-openshift security update

2019-12-1613:47:29
access.redhat.com
17

0.001 Low

EPSS

Percentile

44.9%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

Security Fix(es):

  • kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7) (CVE-2019-11250)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64atomic-openshift-hypershift< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-hypershift-3.11.157-1.git.0.dfe38da.el7.x86_64.rpm
RedHat7ppc64leatomic-openshift-tests< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-tests-3.11.157-1.git.0.dfe38da.el7.ppc64le.rpm
RedHat7x86_64atomic-openshift-tests< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-tests-3.11.157-1.git.0.dfe38da.el7.x86_64.rpm
RedHat7ppc64leatomic-openshift-clients< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-clients-3.11.157-1.git.0.dfe38da.el7.ppc64le.rpm
RedHat7ppc64leatomic-openshift< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-3.11.157-1.git.0.dfe38da.el7.ppc64le.rpm
RedHat7x86_64atomic-openshift-clients< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-clients-3.11.157-1.git.0.dfe38da.el7.x86_64.rpm
RedHat7x86_64atomic-openshift-node< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-node-3.11.157-1.git.0.dfe38da.el7.x86_64.rpm
RedHat7ppc64leatomic-openshift-hyperkube< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-hyperkube-3.11.157-1.git.0.dfe38da.el7.ppc64le.rpm
RedHat7x86_64atomic-openshift-clients-redistributable< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-clients-redistributable-3.11.157-1.git.0.dfe38da.el7.x86_64.rpm
RedHat7x86_64atomic-openshift-master< 3.11.157-1.git.0.dfe38da.el7atomic-openshift-master-3.11.157-1.git.0.dfe38da.el7.x86_64.rpm
Rows per page:
1-10 of 231

Related

gitlab 3
cve 2
github 1
nvd 1
prion 1
osv 4
veracode 1
nessus 7
ibm 15
symantec 1
cvelist 2
redhatcve 2
debiancve 1
ubuntucve 1
hackerone 1
redhat 4
fedora 1
openvas 1
photon 6
gitlab
gitlab
Insertion of Sensitive Information into Log File
2022-05-24 00:00:00
Credentials Management
2019-08-29 00:00:00
Insertion of Sensitive Information into Log File
2022-05-24 00:00:00
cve
cve
CVE-2019-11250
2019-08-29 01:15:11
CVE-2020-8565
2020-12-07 22:15:21
github
github
Kubernetes client-go library logs may disclose credentials to unauthorized users
2022-05-24 16:55:06
nvd
nvd
CVE-2019-11250
2019-08-29 01:15:11
prion
prion
Design/Logic Flaw
2019-08-29 01:15:00
osv
osv
CVE-2019-11250
2019-08-29 01:15:11
Kubernetes client-go library logs may disclose credentials to unauthorized users
2022-05-24 16:55:06
Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go
2021-04-14 20:04:52
veracode
veracode
Information Disclosure
2019-08-14 02:24:54
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2019:4052)
2019-12-18 00:00:00
Photon OS 1.0: Kubernetes PHSA-2020-1.0-0288
2020-04-15 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.1 openshift (RHSA-2019:4087)
2019-12-18 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes [CVE-2019-11250]
2024-06-20 18:19:06
Security Bulletin: A Security Vulnerability affects IBM Cloud Private Kubernetes (CVE-2019-11250)
2019-11-23 15:24:42
Security Bulletin: IBM Cloud Pak for Data Scheduling contains a vulnerable kubectl package ( CVE-2019-11250 )
2023-12-06 16:00:08
symantec
symantec
Kubernetes CVE-2019-11250 Information Disclosure Vulnerability
2019-08-13 00:00:00
cvelist
cvelist
CVE-2019-11250 Kubernetes client-go logs authorization headers at debug verbosity levels
2019-08-12 00:00:00
CVE-2020-8565 Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9
2020-10-15 00:00:00
redhatcve
redhatcve
CVE-2019-11250
2019-08-13 02:23:16
CVE-2020-8565
2020-10-16 00:02:11
debiancve
debiancve
CVE-2019-11250
2019-08-29 01:15:11
ubuntucve
ubuntucve
CVE-2019-11250
2019-08-29 00:00:00
hackerone
hackerone
Kubernetes: CVE-2019-11250 remains in effect.
2020-08-06 17:42:21
redhat
redhat
(RHSA-2019:4087) Moderate: OpenShift Container Platform 4.1 openshift security update
2019-12-17 01:57:41
(RHSA-2021:5085) Moderate: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update
2021-12-13 15:18:58
(RHSA-2021:5086) Moderate: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update
2021-12-13 15:19:23
fedora
fedora
[SECURITY] Fedora 30 Update: kubernetes-1.15.2-1.fc30
2019-08-26 00:53:13
openvas
openvas
Fedora Update for kubernetes FEDORA-2019-2b8ef08c95
2019-08-27 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0288
2020-04-11 00:00:00
Important Photon OS Security Update - PHSA-2020-0288
2020-04-11 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0229
2020-04-14 00:00:00

0.001 Low

EPSS

Percentile

44.9%

JSON
Related for RHSA-2019:4052
gitlab3cve2github1nvd1prion1osv4veracode1nessus7ibm15symantec1cvelist2redhatcve2debiancve1ubuntucve1hackerone1redhat4fedora1openvas1photon6