WID-SEC-W-2022-0496

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat OpenShift: Mehrere Schwachstellen

view advisory published 2021-01-20

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2020-26137USmedium6.5—
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of put…
CVE-2019-11840USmedium5.9OT elevated—
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation o…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan