A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HRed Hat Openshift
APPRedhat4.9
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2013-4561CRITICAL9.1PL ✓same product
Nieprawidłowa obsługa pliku tymczasowego w cron job węzła Red Hat OpenShift
CVE-2021-20578CRITICAL9.8PL ✓same product
IBM Cloud Pak for Security — pominięcie uwierzytelniania (Auth Bypass)
CVE-2014-0234CRITICAL9.8PL ✓same product
Red Hat OpenShift — domyślne hasło 'mooo' do konta MongoDB
CVE-2013-2060CRITICAL9.8PL ✓same product
Command Injection w OpenShift Origin przez metacharacters w URL
CVE-2014-0175CRITICAL9.8PL ✓same product
MCollective: domyślne hasło ustawiane podczas instalacji