RHSA-2020%3A3184 | Vulnetix

RHSA-2020%3A3184 PUBLISHED CVSS 5.400000095367432 MEDIUM

Record from redhat · Published August 5, 2020

A flaw was found in Kubernetes that allows attackers on adjacent networks to reach services exposed on localhost ports, previously thought to be unreachable. This flaw allows an attacker to gain privileges or access confidential information for any services listening on localhost ports that are not protected by authentication.

Risk scores

CVSS 3.1

5.400000095367432

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Vendor	Product	Versions
Red Hat	openshift4/ose-hyperkube@sha256:f9bdfc3dab76dbe7b39892f97997a94e444acf37801a8a53592b55a05cef331a_s390x as a component of Red Hat OpenShift Container Platform 4.3	*
Red Hat	openshift4/ose-hyperkube@sha256:96af3c6ba7ed5a52350cfeb1ebecce7bf39743eeeca872c4de3c962b23fbf81a_ppc64le as a component of Red Hat OpenShift Container Platform 4.3	openshift4/ose-hyperkube@sha256:96af3c6ba7ed5a52350cfeb1ebecce7bf39743eeeca872c4de3c962b23fbf81a_ppc64le
Red Hat	openshift4/ose-hyperkube@sha256:e5446b29f5856c8547c4217c8a0aacbc0a9a6760ff39acb4ac70c19f4501bc90_amd64 as a component of Red Hat OpenShift Container Platform 4.3	openshift4/ose-hyperkube@sha256:e5446b29f5856c8547c4217c8a0aacbc0a9a6760ff39acb4ac70c19f4501bc90_amd64

Timeline

Aug 5, 2020 CVE Published
Nov 21, 2025 CVE Updated
May 1, 2026 Distribution Patch (2 in total, the first dated here)
May 1, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2020%3A3184
vulnetix vdb fixes RHSA-2020%3A3184

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2020%253A3184/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →