Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8x5v-7r3g-jgfj

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

EPSS

Процентиль: 47%
0.00238
Низкий

3.5 Low

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 3.1
redhat
около 9 лет назад

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

CVSS3: 3.1
nvd
больше 7 лет назад

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

EPSS

Процентиль: 47%
0.00238
Низкий

3.5 Low

CVSS3

Дефекты

CWE-20