CVE-2019-3818

May 21, 2021

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.

Summary:

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.

Reference Links(if available):

  • https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3818
  • https://access.redhat.com/security/cve/CVE-2019-3818
  • http://www.securityfocus.com/bid/106744
  • https://access.redhat.com/errata/RHBA-2019:0327

  • CVSS Score (if available)

    v2: / MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

    v3: / HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    Links to Exploits(if available)

  • Tags: , , , ,

    You may have missed

    unlock_membership

    Fortifying Your Network: Strategies for Robust Network Security

    December 23, 2024
    CISA_Logo

    CISA: CISA Adds One Known Exploited Vulnerability to Catalog

    December 23, 2024
    CISA_Logo

    CISA: CISA Releases Six Industrial Control Systems Advisories

    December 23, 2024
    CISA_Logo

    CISA: CISA Releases Eight Industrial Control Systems Advisories

    December 23, 2024
    CISA_Logo

    CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

    December 23, 2024