Showing 1 - 2 of 2

CVE-2022-2403

Status Candidate

Overview

A credentials leak was found in the OpenShift Container Platform. The private key for the external cluster certificate was stored incorrectly in the oauth-serving-cert ConfigMaps, and accessible to any authenticated OpenShift user or service-account. A malicious user could exploit this flaw by reading the oauth-serving-cert ConfigMap in the openshift-config-managed namespace, compromising any web traffic secured using that certificate.

Related Files

Red Hat Security Advisory 2022-5879-01: Posted Aug 10, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-5879-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.9.45.; tags | advisory; systems | linux, redhat; advisories | CVE-2020-29368, CVE-2021-4197, CVE-2021-4203, CVE-2022-1012, CVE-2022-1729, CVE-2022-21540, CVE-2022-21541, CVE-2022-2403, CVE-2022-32250, CVE-2022-34169; SHA-256 | 954ba3d44e847b38ef08b306ba9eb1fd6b913c197417c0c9e44eb925170f6b84; Download | Favorite | View

Red Hat Security Advisory 2022-5664-01: Posted Jul 27, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-5664-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.10.24.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-2403; SHA-256 | 3450cf39b8c727ccff3adde1f835c51d24bfb6a37f572d3947ec97ea78749e24; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 219 files
Jay Turla 150 files
indoushka 133 files
Ubuntu 59 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
Gentoo 33 files
H D Moore 31 files
Debian 27 files

File Archives

Systems

AIX (429)
Apple (2,104)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,112)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (880)
iOS (387)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (50,975)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,661)
Slackware (941)
Solaris (1,614)
SUSE (1,444)
Ubuntu (9,793)
UNIX (9,443)
UnixWare (187)
Windows (6,756)
Other

CVE-2022-2403

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems