Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Openshift Container Platform
MEDIUM 6.5
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privi…
Openstack
MEDIUM 5.5
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. T…
Openstack
MEDIUM 5.5
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. T…
Openshift Container Platform
CRITICAL 9.8
A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker…
Openstack
MEDIUM 6.5
An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without …
Openshift Origin Node Util
MEDIUM 5.5
It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission.
Libvirt
MEDIUM 6.3
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access fil…
Openshift Gitops
MEDIUM 6.5
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-serve…
Openshift Virtualization
HIGH 7.0
An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the containe…
Satellite
MEDIUM 5.5
A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows…
Openstack
HIGH 7.5
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update a…
Gluster Block
MEDIUM 5.5
An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes …
Ansible Tower
MEDIUM 6.5
An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and other secrets could be readable …
Openshift
HIGH 7.8
A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd f…
Openshift
HIGH 7.0
A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/pas…
Template Service Broker Operator
HIGH 7.0
A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerab…
Openshift Container Platform
HIGH 7.0
It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify th…
Openshift Service Mesh
HIGH 7.8
An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the opens…
Ansible Tower
MEDIUM 5.5
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both …
Enterprise Linux
MEDIUM 6.5
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations,…
Openstack Mistral
MEDIUM 5.5
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world…
Jboss Operations Network
HIGH 8.0
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON u…
Enterprise Linux
MEDIUM 5.3
Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 …
Libvirt
HIGH 8.8
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configurati…
Ceph
MEDIUM 5.7
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph d…
Openstack
MEDIUM 5.5
A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive informat…
Enterprise Linux Desktop
MEDIUM 5.0
It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool reada…
Enterprise Linux
HIGH 8.1
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while mod…
Jboss Enterprise Application Platform
MEDIUM 5.5
It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role ma…
Certification
HIGH 7.5
redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file access…