Openshift Уязвимости

Временная шкала

Тип

Virtualization Software36

Продукт

Openshift Container Platform20
Openshift AMQ-Online2
Openshift Enmasse2
Openshift ose-docker-builder2
Openshift template-service-broker-operator2

Устранение последствий

Official Fix22
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

Эксплуатационная пригодность

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined36

Вектор доступа

Not Defined0
Physical0
Local12
Adjacent6
Network18

Аутентификация

Not Defined0
High0
Low26
None10

Взаимодействие с пользователем

Not Defined0
Required6
None30

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤40
≤512
≤68
≤710
≤82
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤40
≤512
≤68
≤710
≤82
≤92
≤100

VulDB

≤10
≤20
≤32
≤414
≤512
≤62
≤72
≤82
≤92
≤100

NVD

≤10
≤20
≤32
≤40
≤50
≤610
≤712
≤82
≤96
≤102

CNA

≤10
≤20
≤32
≤40
≤52
≤60
≤72
≤80
≤90
≤100

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k12
<2k18
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k36
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Products (23): AMQ-Online (1), API Server (1), Builder (1), Container Platform (15), Enmasse (1), Installer (1), MediaWiki (1), OAuth Server (1), OSIN (1), Origin (1), Origin Server (1), ServiceMesh (1), apb-base (1), apiserver-library-go (1), haproxy cartridge (1), istio-rhel8-operator (1), machine-config-operator (1), mariadb-apb (1), mediawiki-apb (1), ose-docker-builder (1), postgresql-apb (1), service-mesh (1), template-service-broker-operator (1)

ОпубликованоBaseTempУязвимостиProdЭ�RemEPSSCTICVE
27.01.20235.95.9OpenShift apiserver-library-go seccomp Profile эскалация привилегийVirtualization SoftwareNot DefinedNot Defined0.000650.00CVE-2023-0229
28.12.20222.62.4OpenShift OSIN CheckClientSecret раскрытие информацииVirtualization SoftwareNot DefinedOfficial Fix0.001100.05CVE-2021-4294
07.07.20224.54.4Openshift Origin Console раскрытие информацииVirtualization SoftwareNot DefinedOfficial Fix0.000720.00CVE-2015-3207
01.07.20227.37.2Openshift Origin Server эскалация привилегийVirtualization SoftwareNot DefinedOfficial Fix0.001910.00CVE-2013-4561
08.06.20213.53.4OpenShift machine-config-operator отказ в обслуживанииVirtualization SoftwareNot DefinedOfficial Fix0.000680.00CVE-2020-1750
02.06.20213.53.5Openshift Container Platform Restricted Security Context Constraints отказ в обслуживанииVirtualization SoftwareNot DefinedNot Defined0.000680.00CVE-2020-14336
20.03.20214.94.9Openshift Container Platform GlusterFS StorageClass раскрытие информацииVirtualization SoftwareNot DefinedNot Defined0.000720.00CVE-2019-10225
20.03.20216.76.7Openshift Container Platform эскалация привилегийVirtualization SoftwareNot DefinedOfficial Fix0.001040.00CVE-2019-10200
17.03.20215.75.7Openshift Builder Container Image or раскрытие информацииVirtualization SoftwareNot DefinedNot Defined0.000880.00CVE-2021-3344
24.02.20216.16.1Openshift ose-docker-builder эскалация привилегийVirtualization SoftwareNot DefinedNot Defined0.000870.00CVE-2021-20182

25 больше записей не показано

🔒 Login Required

You need to signup and login to see more of the remaining 25 results.

◂ ПредыдущийОбзорДалее ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!