Описание
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS
Отчет
This issue affects the versions of the haproxy cartridge as shipped with Red Hat OpenShift Enterprise 1 and 2. Red Hat Product Security has rated this issue as having Low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/. Additionally OpenShift uses a per user poly-instantiated /tmp directory which makes exploitation of this issue very difficult.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| OpenShift Enterprise 1 | openshift-origin-cartridge-haproxy | Will not fix | ||
| Red Hat OpenShift Enterprise 2 | openshift-origin-cartridge-haproxy | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
3.6 Low
CVSS2
Связанные уязвимости
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS
EPSS
3.6 Low
CVSS2