Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2019:4087
HistoryDec 17, 2019 - 1:57 a.m.

(RHSA-2019:4087) Moderate: OpenShift Container Platform 4.1 openshift security update

2019-12-1701:57:41
access.redhat.com
21

0.003 Low

EPSS

Percentile

66.3%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

Security Fix(es):

  • libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions (CVE-2017-18367)

  • kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7) (CVE-2019-11250)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64openshift-hyperkube< 4.1.27-201912021146.git.0.a40116f.el8_0openshift-hyperkube-4.1.27-201912021146.git.0.a40116f.el8_0.x86_64.rpm
RedHat7x86_64openshift-clients< 4.1.27-201912021146.git.0.a40116f.el7openshift-clients-4.1.27-201912021146.git.0.a40116f.el7.x86_64.rpm
RedHat7x86_64openshift-clients-redistributable< 4.1.27-201912021146.git.0.a40116f.el7openshift-clients-redistributable-4.1.27-201912021146.git.0.a40116f.el7.x86_64.rpm
RedHat7x86_64openshift-hyperkube< 4.1.27-201912021146.git.0.a40116f.el7openshift-hyperkube-4.1.27-201912021146.git.0.a40116f.el7.x86_64.rpm
RedHat8x86_64openshift-clients-redistributable< 4.1.27-201912021146.git.0.a40116f.el8_0openshift-clients-redistributable-4.1.27-201912021146.git.0.a40116f.el8_0.x86_64.rpm
RedHat8x86_64openshift-clients< 4.1.27-201912021146.git.0.a40116f.el8_0openshift-clients-4.1.27-201912021146.git.0.a40116f.el8_0.x86_64.rpm

Related

nessus 12
debian 1
osv 9
ubuntu 1
github 2
prion 2
cve 3
veracode 2
cvelist 3
redhat 6
nvd 2
openvas 3
ubuntucve 2
redhatcve 3
debiancve 2
gitlab 3
ibm 15
symantec 1
hackerone 1
fedora 1
photon 6
nessus
nessus
RHEL 7 / 8 : OpenShift Container Platform 4.1 openshift (RHSA-2019:4087)
2019-12-18 00:00:00
Debian DLA-2320-1 : golang-github-seccomp-libseccomp-golang security update
2020-08-12 00:00:00
Ubuntu 16.04 LTS : libseccomp-golang vulnerability (USN-4574-1)
2020-10-08 00:00:00
debian
debian
[SECURITY] [DLA 2320-1] golang-github-seccomp-libseccomp-golang security update
2020-08-11 08:37:09
osv
osv
golang-github-seccomp-libseccomp-golang vulnerability
2020-10-07 19:32:20
Improper input validation in github.com/seccomp/libseccomp-golang
2021-04-14 20:04:52
golang-github-seccomp-libseccomp-golang - security update
2020-08-10 00:00:00
ubuntu
ubuntu
libseccomp-golang vulnerability
2020-10-07 00:00:00
github
github
Improper Input Validation in libseccomp-golang
2021-05-18 15:44:30
Kubernetes client-go library logs may disclose credentials to unauthorized users
2022-05-24 16:55:06
prion
prion
Design/Logic Flaw
2019-04-24 21:29:00
Design/Logic Flaw
2019-08-29 01:15:00
cve
cve
CVE-2017-18367
2019-04-24 21:29:00
CVE-2019-11250
2019-08-29 01:15:11
CVE-2020-8565
2020-12-07 22:15:21
veracode
veracode
Authorization Bypass
2019-04-25 07:59:29
Information Disclosure
2019-08-14 02:24:54
cvelist
cvelist
CVE-2017-18367
2019-04-24 20:02:19
CVE-2019-11250 Kubernetes client-go logs authorization headers at debug verbosity levels
2019-08-12 00:00:00
CVE-2020-8565 Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9
2020-10-15 00:00:00
redhat
redhat
(RHSA-2019:4090) Moderate: OpenShift Container Platform 4.1 libseccomp-golang security update
2019-12-17 07:36:30
(RHSA-2019:4052) Moderate: OpenShift Container Platform 3.11 atomic-openshift security update
2019-12-16 13:47:29
(RHSA-2020:2479) Moderate: OpenShift Container Platform 3.11 atomic-openshift security update
2020-06-18 03:52:41
nvd
nvd
CVE-2017-18367
2019-04-24 21:29:00
CVE-2019-11250
2019-08-29 01:15:11
openvas
openvas
Debian: Security Advisory (DLA-2320-1)
2020-08-17 00:00:00
Ubuntu: Security Advisory (USN-4574-1)
2020-10-08 00:00:00
Fedora Update for kubernetes FEDORA-2019-2b8ef08c95
2019-08-27 00:00:00
ubuntucve
ubuntucve
CVE-2017-18367
2019-04-24 00:00:00
CVE-2019-11250
2019-08-29 00:00:00
redhatcve
redhatcve
CVE-2017-18367
2020-03-31 08:17:54
CVE-2019-11250
2019-08-13 02:23:16
CVE-2020-8565
2020-10-16 00:02:11
debiancve
debiancve
CVE-2017-18367
2019-04-24 21:29:00
CVE-2019-11250
2019-08-29 01:15:11
gitlab
gitlab
Insertion of Sensitive Information into Log File
2022-05-24 00:00:00
Credentials Management
2019-08-29 00:00:00
Insertion of Sensitive Information into Log File
2022-05-24 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes [CVE-2019-11250]
2024-06-20 18:19:06
Security Bulletin: A Security Vulnerability affects IBM Cloud Private Kubernetes (CVE-2019-11250)
2019-11-23 15:24:42
Security Bulletin: IBM Cloud Pak for Data Scheduling contains a vulnerable kubectl package ( CVE-2019-11250 )
2023-12-06 16:00:08
symantec
symantec
Kubernetes CVE-2019-11250 Information Disclosure Vulnerability
2019-08-13 00:00:00
hackerone
hackerone
Kubernetes: CVE-2019-11250 remains in effect.
2020-08-06 17:42:21
fedora
fedora
[SECURITY] Fedora 30 Update: kubernetes-1.15.2-1.fc30
2019-08-26 00:53:13
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0288
2020-04-11 00:00:00
Important Photon OS Security Update - PHSA-2020-0288
2020-04-11 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0229
2020-04-14 00:00:00

0.003 Low

EPSS

Percentile

66.3%

JSON
Related for RHSA-2019:4087
nessus12debian1osv9ubuntu1github2prion2cve3veracode2cvelist3redhat6nvd2openvas3ubuntucve2redhatcve3debiancve2gitlab3ibm15symantec1hackerone1fedora1photon6