Showing 1 - 2 of 2

CVE-2015-7528

Status Candidate

Overview

Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.

Red Hat Security Advisory 2015-2615-01: Posted Dec 11, 2015; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2015-2615-01 - OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service solution designed for on-premise or private cloud deployments. It was found that OpenShift's API back end did not verify requests for pod log locations, allowing a pod on a Node to request logs for any other pod on that Node. A remote attacker could use this flaw to view sensitive information via pod logs that they would normally not have access to. This issue was discovered by Jordan Liggitt of Red Hat Atomic OpenShift.; tags | advisory, remote; systems | linux, redhat; advisories | CVE-2015-7528; SHA-256 | f3432d0be559e3976310498033991e4fae6baae5512185c47a942eda1c490353; Download | Favorite | View

Red Hat Security Advisory 2015-2544-01: Posted Dec 3, 2015; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2015-2544-01 - OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service solution designed for on-premise or private cloud deployments. It was found that OpenShift's API back end did not verify requests for pod log locations, allowing a pod on a Node to request logs for any other pod on that Node. A remote attacker could use this flaw to view sensitive information via pod logs that they would normally not have access to. This issue was discovered by Jordan Liggitt of Red Hat Atomic OpenShift.; tags | advisory, remote; systems | linux, redhat; advisories | CVE-2015-7528; SHA-256 | e79355bab9122208743e19448a24c138d26a43a46d9ca55a2e5cfa71b1f163cc; Download | Favorite | View

Page 1 of 1 Back 1 Next