Red Hat Openshift Container Platform vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Red Hat Openshift Container Platform: 102 record(s), with affected versions and fixes.
cpe:2.3:a:redhat:openshift_container_platform

CVE-2017-15095 Critical · 9.8 CWE-502 Feb 6, 2018

Deserialization of Untrusted Data in Fasterxml Jackson-databind

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.

CVE-2018-5968 High · 8.1 CWE-184 Jan 22, 2018

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated…

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.