Openshift Data Science vulnerabilities
3 known vulnerabilities in Openshift Data Science from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
RHOAI-2.14-RHEL-8: Authentication Bypass by Primary Weakness
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials f
- 7.5 High severity
odh-dashboard: Cleartext Transmission of Sensitive Information
A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster (ds pipeline server) and saves them in plain text in the generated output inst
- 9.8 Critical severity
RHODS-1.22-RHEL-8: Missing Authorization
A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues.