Github.Com Openshift Origin vulnerabilities

3 known vulnerabilities affecting github.com/openshift_origin.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2015-3207MEDIUM≥ 0, < 1.0.02022-07-08

CVE-2015-3207 [MEDIUM] CWE-311 Insecure cookies in Openshift Origin Insecure cookies in Openshift Origin In Openshift Origin the cookies being set in console have no 'secure', 'HttpOnly' attributes.

CVE-2016-1906CRITICAL≥ 0, < 1.1.12021-12-20

CVE-2016-1906 [CRITICAL] CWE-285 Authorization bypass in Openshift Authorization bypass in Openshift Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

CVE-2015-5250MEDIUM≥ 0, < 1.0.62021-12-20

CVE-2015-5250 [MEDIUM] CWE-20 Denial of Service in OpenShift Origin Denial of Service in OpenShift Origin The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data