CVE-2019-10150 (openshift_container_platform)

It was found that OpenShift Container Platform versions 3.6.x – 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

View Full Alert

Related Posts

  • CVE-2019-11080 (experience_platform)

    Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863. An authenticated user with necessary permissions is able to remotely execute…

  • CVE-2019-9673 (freenet)

    Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.

  • CVE-2019-12765 (joomla!)

    An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection. View Full Alert