openshift/origin-server

openshift/origin-server

Releases6.56K

Frequency6 hours

Last Release over 9 years ago

Stars883

OpenShift 2 (deprecated)

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2013-4561 ↗	Jun 30, 2022Thursday, 30 June 2022, 19:15	9.1 CRITICAL	6.4 MEDIUM
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
CVE-2014-3496 ↗	Jun 20, 2014Friday, 20 June 2014, 14:55	—	10 HIGH
cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a (1) .tar.gz, (2) .zip, (3) .tgz, or (4) .tar file extension in a cartridge manifest file.
CVE-2013-0164 ↗	Feb 24, 2013Sunday, 24 February 2013, 22:55	—	3.6 LOW
The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
CVE-2012-5647 ↗	Feb 24, 2013Sunday, 24 February 2013, 21:55	—	5.8 MEDIUM
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
CVE-2012-5646 ↗	Feb 24, 2013Sunday, 24 February 2013, 21:55	—	7.5 HIGH
node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.
CVE-2012-5622 ↗	Dec 18, 2012Tuesday, 18 December 2012, 01:55	—	6.8 MEDIUM
Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.