CVE-2019-3818
published 2019-02-05CVE-2019-3818: The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of…
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.66%
47.6th percentile
The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kube-rbac-proxy_project | kube-rbac-proxy | < 0.4.1 | 0.4.1 |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv3.03.7LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-69hf-98q7-wjq8: The kube-rbac-proxy container before version 0
ghsa_unreviewed·2022-05-13
CVE-2019-3818 [HIGH] CWE-327 GHSA-69hf-98q7-wjq8: The kube-rbac-proxy container before version 0
The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.
Red Hat
kube-rbac-proxy: Improper application of config allows for insecure ciphers and TLS 1.0
vendor_redhat·2019-01-25·CVSS 7.5
CVE-2019-3818 [HIGH] CWE-327 kube-rbac-proxy: Improper application of config allows for insecure ciphers and TLS 1.0
kube-rbac-proxy: Improper application of config allows for insecure ciphers and TLS 1.0
The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.
The kube-rbac-proxy container, as used in Red Hat OpenShift Container Platform, does not honor TLS configurations allowing for the use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption of the data stream.
Package: openshift4/ose-kube-rbac-proxy-rhel9 (Red Hat OpenShift Container Platform 4) - N
No detection rules found.
No public exploits indexed.
http://www.securityfocus.com/bid/106744https://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/security/cve/CVE-2019-3818https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3818http://www.securityfocus.com/bid/106744https://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/security/cve/CVE-2019-3818https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3818
2019-02-05
Published