Man-in-the-Middle (MitM)

2019-07-1808:17:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.008 Low

EPSS

Percentile

82.2%

JSON

github.com/openshift/origin is vulnerable to Man-in-the-Middle (MitM) attack. It fails to validate the SSH host key for SSH authentication during the builds, allowing a attacker who can redirect the traffic to compromise the resulting build output.

CPENameOperatorVersion
github.com/openshift/origineqHEAD
github.com/openshift/originle4.0.0-alpha.0
cri-oeq1.9.13__1.git52a8e70.el7
cri-oeq1.9.16__1.git78b2041.el7
cri-oeq1.10.5__1.rhaos3.10.git4c81456.el7
cri-oeq1.0.4__2.git4aceede.el7
cri-oeq1.9.14__1.git4e220eb.el7
cri-oeq1.9.10__1.git8723732.el7
cri-oeq1.0.6__1.gitf19b368.el7
cri-oeq1.8.5__1.git70cd264.el7

Name	Operator	Version
github.com/openshift/origin	eq	HEAD
github.com/openshift/origin	le	4.0.0-alpha.0
cri-o	eq	1.9.13__1.git52a8e70.el7
cri-o	eq	1.9.16__1.git78b2041.el7
cri-o	eq	1.10.5__1.rhaos3.10.git4c81456.el7
cri-o	eq	1.0.4__2.git4aceede.el7
cri-o	eq	1.9.14__1.git4e220eb.el7
cri-o	eq	1.9.10__1.git8723732.el7
cri-o	eq	1.0.6__1.gitf19b368.el7
cri-o	eq	1.8.5__1.git70cd264.el7