Denial of Service in OpenShift Origin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-5250 · ADVISORY
• openshift/origin · WEB
• openshift/origin commit dace507 · WEB
• access.redhat.com/errata/RHSA-2015:1736 · WEB
• access.redhat.com/security/cve/CVE-2015-5250 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• web.nvd.nist.gov/view/vuln/detail · WEB
• GitHub Advisory GHSA-rf3m-mhv7-x39f · ADVISORY

github.com/openshift/origin のその他の脆弱性

• CVE-2015-3207中 5.3In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
• CVE-2016-1906緊急 9.8Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that …