Kube-Rbac-Proxy Project Kube-Rbac-Proxy vulnerabilities

1 known vulnerability affecting kube-rbac-proxy_project/kube-rbac-proxy.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-3818HIGHCVSS 7.5fixed in 0.4.12019-02-05

CVE-2019-3818 [HIGH] CWE-327 CVE-2019-3818: The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform d The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.