| Package | Affected versions | Patched versions |
|---|---|---|
| openshift container platform | = 4.0 |
A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject arbitrary environment variables, such as `LD_PRELOAD` or `http_proxy`, into `docker-build` containers through the `buildconfigs/instantiate` API. This incomplete fix for a previous vulnerability allows for information disclosure, specifically impacting the confidentiality of build traffic.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free