OpenShift vulnerabilities
We track 2 vulnerabilities in OpenShift products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2023.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest OpenShift vulnerabilities
- 7.5 High severity
openshift: Weak Password Requirements
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
- 8.1 High severity
openshift: Initialization of a Resource with an Insecure Default
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availab