Orta CVSS 6.8

CVE-2026-3012: Openshift Container Platform: güvenlik açığı

Yayın: 27 Mayıs 2026 14:16 · Güncelleme: 6 Kasım 2026 10:18

Açıklama (NVD)

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.

Özet bilgiler

Ürün: Redhat Openshift Container Platform
CVSS v3.1: 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: %0,26 (yüzdelik 18)
CWE: CWE-345
Yama: Geçici çözüm

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
redhat-openshift-container-platform	4.0	4.0	—
samba-samba	4.16.0	—	4.21.0
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	9.0	9.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları