Vulnetix
Try Vulnetix Request Demo
CVE-2019-10150 PUBLISHED CVSS 5.900000095367432 MEDIUM

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

EPSS 0.30% · 53.5th percentile

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
EPSS Score
0.30%
53.5th percentile

Affected Products

VendorProductVersions
redhatopenshift_container_platform3.6
redhatatomic-openshift3.6.x - 4.0.0

Timeline

References

Open in Interactive Console →