Product by Red Hat

    Red Hat Openshift Container Platform 3.11

    18 known vulnerabilities in Red Hat Openshift Container Platform 3.11 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Openshift Container Platform 3.11 (Red Hat)
    HighCVE-2024-3727

    Containers/image: digest type does not guarantee valid type

    also in 24 other products

    		8.3
    HighCVE-2024-5154

    Cri-o: malicious container can create symlink on host

    also in 11 other products

    		8.1
    HighCVE-2024-0567

    Gnutls: rejects certificate chain with distributed trust

    also in 11 other products

    		7.5
    HighCVE-2024-3154

    Cri-o: arbitrary command injection via pod annotation

    also in 5 other products

    		7.2
    HighCVE-2023-3966

    Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

    also in 9 other products

    		7.5
    HighCVE-2024-1139

    Cluster-monitoring-operator: credentials leak

    also in 6 other products

    		7.7
    MediumCVE-2024-11831

    Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

    also in 38 other products

    		5.4
    HighCVE-2024-8676

    Cri-o: checkpoint restore can be triggered from different namespaces

    also in 8 other products

    		7.4
    HighCVE-2023-6476

    Cri-o: pods are able to break out of resource confinement on cgroupv2

    also in 4 other products

    		6.5
    HighCVE-2024-3056

    Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack

    also in 14 other products

    		7.7
    HighCVE-2024-1753

    Buildah: buildah: container escape via improper bind mount validation

    also in 12 other products

    		8.6
    HighCVE-2023-3089

    Ocp & fips mode

    also in 10 other products

    		7.0
    HighCVE-2023-5366

    Openvswitch don't match packets on nd_target field

    also in 15 other products

    		7.1
    MediumCVE-2024-7079

    Openshift-console: unauthenticated installation of helm charts

    also in 2 other products

    		6.5
    MediumCVE-2024-7631

    Openshift-console: openshift console: path traversal

    also in 2 other products

    		4.3
    MediumCVE-2024-7128

    Openshift-console: unauthenticated data exposure

    also in 3 other products

    		5.3
    HighCVE-2022-3248

    Openshift api admission checks does not enforce "custom-host" permissions

    also in 5 other products

    		4.4
    MediumCVE-2022-3466

    Cri-o: security regression of cve-2022-27652

    also in 3 other products

    		4.8

    All products by Red Hat