Orta CVSS 4.3
CVE-2026-7309: Openshift Container Platform: güvenlik açığı
Açıklama (NVD)
A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject arbitrary environment variables, such as `LD_PRELOAD` or `http_proxy`, into `docker-build` containers through the `buildconfigs/instantiate` API. This incomplete fix for a previous vulnerability allows for information disclosure, specifically impacting the confidentiality of build traffic.
Özet bilgiler
- Ürün
- Redhat Openshift Container Platform
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,18 (yüzdelik 8)
- CWE
- CWE-426
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-openshift-container-platform | 4.0 | 4.0 | — |