A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade jenkins-plugin-mercurialUpgrade python-dictdifferUpgrade python-httplib2Upgrade rubygem-i18nUpgrade heapsterUpgrade nodejs-basic-authUpgrade nodejs-media-typerUpgrade nodejs-content-typeUpgrade nodejs-wrappyUpgrade rubygem-fluent-mixin-config-placeholdersUpgrade jenkins-plugin-git-serverUpgrade nodejs-is-absoluteUpgrade nodejs-whichUpgrade jenkins-plugin-docker-workflowUpgrade cockpitUpgrade nodejs-raw-bodyUpgrade nodejs-is-finiteUpgrade nodejs-resolveUpgrade rubygem-sigdumpUpgrade nodejs-passport-http-bearerUpgrade nodejs-repeat-stringUpgrade rubygem-fluent-plugin-viaq_data_modelUpgrade nodejs-is-my-json-validUpgrade nodejs-lcidUpgrade jenkins-plugin-display-url-apiUpgrade nodejs-sendUpgrade nodejs-balanced-matchUpgrade nodejs-isstreamUpgrade nodejs-noptUpgrade jenkins-2-pluginsUpgrade nodejs-esprimaUpgrade containernetworking-pluginsUpgrade nodejs-asn1Upgrade nodejs-mimeUpgrade python-pysocksUpgrade nodejs-chalkUpgrade nodejs-cookieUpgrade python-urllib3Upgrade openshift-external-storageUpgrade nodejs-range-parserUpgrade jenkins-plugin-momentjsUpgrade mediawiki-apb-roleUpgrade nodejs-openshift-auth-proxyUpgrade jenkins-plugin-githubUpgrade nodejs-right-alignUpgrade nodejs-has-colorUpgrade nodejs-client-sessionsUpgrade golang-github-prometheus-alertmanagerUpgrade python-passlibUpgrade jenkinsUpgrade nodejs-passport-oauth2Upgrade nodejs-forwardedUpgrade rubygem-proxifierUpgrade postgresql-apb-roleUpgrade nodejs-on-headersUpgrade nodejs-js-yamlUpgrade apbUpgrade nodejs-base64urlUpgrade nodejs-oauth-signUpgrade python-certifiUpgrade jenkins-plugin-mailerUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade rubygem-msgpackUpgrade jenkins-plugin-git-clientUpgrade nodejs-bluebirdUpgrade nodejs-wordwrapUpgrade python-google-authUpgrade nodejs-file-sync-cmpUpgrade jenkins-plugin-blueocean-pipeline-editorUpgrade golang-github-openshift-oauth-proxyUpgrade jenkins-plugin-blueocean-dashboardUpgrade python-ruamel-yamlUpgrade libuvUpgrade nodejs-dateformatUpgrade nodejs-repeatingUpgrade python-ruamel-ordereddictUpgrade nodejs-mime-typesUpgrade nodejs-url-joinUpgrade nodejs-exitUpgrade jenkins-plugin-workflow-supportUpgrade nodejs-http-signatureUpgrade nodejs-grunt-legacy-logUpgrade nodejs-msUpgrade nodejs-graceful-readlinkUpgrade nodejs-cryptilesUpgrade nodejs-asapUpgrade jenkins-plugin-pipeline-build-stepUpgrade nodejs-keygripUpgrade python-openshiftUpgrade nodejs-yargsUpgrade nodejs-brace-expansionUpgrade openshift-ansibleUpgrade nodejs-lru-cacheUpgrade jenkins-plugin-workflow-jobUpgrade mysql-apb-roleUpgrade python-paramikoUpgrade nodejs-parseurlUpgrade jenkins-plugin-pipeline-rest-apiUpgrade rubygem-mime-typesUpgrade jenkins-plugin-scm-apiUpgrade rubygem-recursive-open-structUpgrade nodejs-decamelizeUpgrade rubygem-kubeclientUpgrade jenkins-plugin-variantUpgrade jenkins-plugin-workflow-cps-global-libUpgrade kibanaUpgrade nodejs-isarrayUpgrade golang-github-prometheus-node_exporterUpgrade jenkins-plugin-blueoceanUpgrade nodejs-boomUpgrade nodejs-http-errorsUpgrade nodejs-grunt-contrib-copyUpgrade atomic-openshiftUpgrade nodejs-utils-mergeUpgrade jenkins-plugin-pipeline-stage-stepUpgrade jenkins-plugin-handlebarsUpgrade nodejs-expressUpgrade nodejs-supports-colorUpgrade rubygem-fluent-plugin-rewrite-tag-filterUpgrade nodejs-packagingUpgrade nodejs-number-is-nanUpgrade jenkins-plugin-github-apiUpgrade jenkins-plugin-github-branch-sourceUpgrade nodejs-blUpgrade nodejs-generate-functionUpgrade nodejs-statusesUpgrade jenkins-plugin-pipeline-stage-viewUpgrade jenkins-plugin-workflow-aggregatorUpgrade ansibleUpgrade nodejs-longestUpgrade rubygem-fluent-plugin-remote-syslogUpgrade python-clickUpgrade dumb-initUpgrade rubygem-fluent-plugin-kubernetes_metadata_filterUpgrade jenkins-plugin-blueocean-pipeline-api-implUpgrade http-parserUpgrade mariadb-apb-roleUpgrade nodejs-uid2Upgrade rubygem-fluent-plugin-systemdUpgrade ansible-kubernetes-modulesUpgrade rubygem-elasticsearch-apiUpgrade nodejs-depdUpgrade rubygem-fluent-plugin-record-modifierUpgrade nodejs-gruntUpgrade jenkins-plugin-jquery-detachedUpgrade nodejs-oauthUpgrade nodejs-eventemitter2Upgrade nodejs-object-assignUpgrade nodejs-grunt-legacy-log-utilsUpgrade nodejs-is-relativeUpgrade openshift-elasticsearch-pluginUpgrade nodejs-meowUpgrade golang-github-prometheus-promuUpgrade jenkins-plugin-authentication-tokensUpgrade nodejs-yallistUpgrade nodejs-hoekUpgrade nodejs-requestUpgrade jenkins-plugin-workflow-remote-loaderUpgrade nodejs-har-validatorUpgrade nodejs-sprintf-jsUpgrade rubygem-faradayUpgrade nodejs-rimrafUpgrade nodejs-getobjectUpgrade nodejs-proxy-addrUpgrade nodejs-center-alignUpgrade nodejs-hawkUpgrade rubygem-netrcUpgrade nodejs-inflightUpgrade nodejs-debugUpgrade jenkins-plugin-icon-shimUpgrade jenkins-plugin-workflow-durable-task-stepUpgrade jenkins-plugin-workflow-cpsUpgrade jenkins-plugin-pipeline-graph-analysisUpgrade jenkins-plugin-credentials-bindingUpgrade nodejs-minimistUpgrade nodejs-coffee-scriptUpgrade nodejs-align-textUpgrade jenkins-plugin-pipeline-milestone-stepUpgrade nodejs-path-to-regexpUpgrade nodejs-is-windowsUpgrade nodejs-os-localeUpgrade jenkins-plugin-plain-credentialsUpgrade nodejs-concat-mapUpgrade jenkins-plugin-blueocean-configUpgrade nodejs-string_decoderUpgrade nodejs-content-dispositionUpgrade jenkins-plugin-ace-editorUpgrade rubygem-ffiUpgrade rubygem-http-form_dataUpgrade jenkins-plugin-blueocean-autofavoriteUpgrade rubygem-multi_jsonUpgrade nodejs-cookiesUpgrade jenkins-plugin-blueocean-display-urlUpgrade nodejs-core-util-isUpgrade golang-github-prometheus-prometheusUpgrade jenkins-plugin-ssh-credentialsUpgrade jenkins-plugin-workflow-basic-stepsUpgrade rubygem-elasticsearchUpgrade nodejs-window-sizeUpgrade nodejs-tough-cookieUpgrade rubygem-tzinfoUpgrade nodejs-node-uuidUpgrade jenkins-plugin-subversionUpgrade python-crontabUpgrade python-string_utilsUpgrade nodejs-strip-ansiUpgrade nodejs-qsUpgrade nodejs-ee-firstUpgrade python-mockUpgrade jenkins-plugin-pipeline-input-stepUpgrade jenkins-plugin-favoriteUpgrade nodejs-ipaddr.jsUpgrade nodejs-promiseUpgrade python-dockerUpgrade jenkins-plugin-branch-apiUpgrade nodejs-grunt-legacy-utilUpgrade python-botoUpgrade jenkins-plugin-openshift-loginUpgrade nodejs-is-propertyUpgrade nodejs-freshUpgrade nodejs-parse-durationUpgrade jenkins-plugin-pipeline-model-declarative-agentUpgrade nodejs-has-flagUpgrade nodejs-xtendUpgrade python-cachetoolsUpgrade nodejs-methodsUpgrade rubygem-syslog_protocolUpgrade nodejs-forever-agentUpgrade jenkins-plugin-workflow-apiUpgrade nodejs-colorsUpgrade nodejs-lodashUpgrade python-pyUpgrade nodejs-http-proxyUpgrade nodejs-grunt-contrib-lessUpgrade nodejs-cliuiUpgrade jenkins-plugin-workflow-step-apiUpgrade atomic-openshift-deschedulerUpgrade nodejs-errnoUpgrade nodejs-readable-streamUpgrade sshpassUpgrade jenkins-plugin-script-securityUpgrade jenkins-plugin-blueocean-restUpgrade rubygem-resolve-hostnameUpgrade nodejs-typedarrayUpgrade nodejs-pauseUpgrade nodejs-grunt-cliUpgrade jenkins-plugin-metricsUpgrade nodejs-camelcase-keysUpgrade nodejs-array-flattenUpgrade rubygem-http_parser.rbUpgrade nodejs-hookerUpgrade image-inspectorUpgrade nodejs-combined-streamUpgrade nodejs-path-is-absoluteUpgrade jenkins-plugin-sse-gatewayUpgrade rubygem-yajl-rubyUpgrade nodejs-ansi-stylesUpgrade nodejs-process-nextick-argsUpgrade jenkins-plugin-matrix-authUpgrade nodejs-y18nUpgrade nodejs-argparseUpgrade jenkins-plugin-blueocean-jwtUpgrade nodejs-unpipeUpgrade ansible-service-brokerUpgrade rubygem-unfUpgrade nodejs-util-deprecateUpgrade openshift-eventrouterUpgrade nodejs-eventemitter3Upgrade nodejs-invert-kvUpgrade nodejs-aws-sign2Upgrade nodejs-kind-ofUpgrade nodejs-passport-strategyUpgrade jenkins-plugin-pipeline-model-extensionsUpgrade rubygem-multipart-postUpgrade nodejs-escape-string-regexpUpgrade jenkins-plugin-blueocean-eventsUpgrade nodejs-abbrevUpgrade jenkins-plugin-docker-commonsUpgrade rubygem-minitestUpgrade rubygem-systemd-journalUpgrade nodejs-mkdirpUpgrade nodejs-etagUpgrade python-elasticsearchUpgrade nodejs-passportUpgrade rubygem-thread_safeUpgrade jenkins-plugin-kubernetesUpgrade nodejs-negotiatorUpgrade rubygem-mime-types-dataUpgrade rubygem-fluent-plugin-flatten-hashUpgrade nodejs-map-objUpgrade python-rsaUpgrade rubygem-elasticsearch-transportUpgrade jenkins-plugin-pipeline-model-definitionUpgrade nodejs-acceptsUpgrade nodejs-bytesUpgrade jenkins-plugin-openshift-pipelineUpgrade rubygem-fluent-plugin-elasticsearchUpgrade jenkins-plugin-matrix-projectUpgrade jenkins-plugin-multiple-scmsUpgrade rubygem-domain_nameUpgrade rubygem-string-scrubUpgrade nodejs-iconv-liteUpgrade nodejs-globUpgrade jenkins-plugin-mapdb-apiUpgrade nodejs-assert-plusUpgrade rubygem-lru_reduxUpgrade rubygem-cool.ioUpgrade nodejs-image-sizeUpgrade nodejs-minimatchUpgrade nodejs-serve-staticUpgrade mediawiki123Upgrade rubygem-uuidtoolsUpgrade nodejsUpgrade rubygem-rest-clientUpgrade nodejs-form-dataUpgrade nodejs-destroyUpgrade nodejs-pseudomapUpgrade nodejs-delayed-streamUpgrade rubygem-unf_extUpgrade rubygem-fluent-plugin-docker_metadata_filterUpgrade nodejs-stringstreamUpgrade rubygem-exconUpgrade nodejs-concat-streamUpgrade nodejs-findup-syncUpgrade nodejs-requires-portUpgrade nodejs-varyUpgrade python-typingUpgrade nodejs-underscore-dot-stringUpgrade nodejs-on-finishedUpgrade jenkins-plugin-token-macroUpgrade apb-base-scriptsUpgrade nodejs-type-isUpgrade jenkins-plugin-blueocean-webUpgrade mediawiki-container-scriptsUpgrade nodejs-asyncUpgrade rubygem-http-cookieUpgrade nodejs-indent-stringUpgrade nodejs-has-ansiUpgrade nodejs-json-stringify-safeUpgrade jenkins-plugin-cloudbees-folderUpgrade nodejs-source-mapUpgrade jenkins-plugin-blueocean-personalizationUpgrade nodejs-body-parserUpgrade jenkins-plugin-pipeline-utility-stepsUpgrade nodejs-morganUpgrade nodejs-mime-dbUpgrade rubygem-docker-apiUpgrade elastic-curatorUpgrade nodejs-lessUpgrade rubygem-activesupportUpgrade nodejs-camelcaseUpgrade nodejs-onceUpgrade elasticsearch-cloud-kubernetesUpgrade rubygem-addressableUpgrade ansible-asb-modulesUpgrade nodejs-merge-descriptorsUpgrade nodejs-tunnel-agentUpgrade nodejs-unc-path-regexUpgrade atomic-openshift-node-problem-detectorUpgrade nodejs-ansi-regexUpgrade nodejs-is-bufferUpgrade fluentdUpgrade jenkins-plugin-blueocean-rest-implUpgrade rubygem-fluent-plugin-secure-forwardUpgrade nodejs-escape-htmlUpgrade nodejs-generate-object-propertyUpgrade jenkins-plugin-blueocean-i18nUpgrade rubygem-tzinfo-dataUpgrade jenkins-plugin-pubsub-lightUpgrade nodejs-sntpUpgrade perl-IO-StringUpgrade rubygem-httpUpgrade jenkins-plugin-workflow-scm-stepUpgrade jenkins-plugin-gitUpgrade nodejs-prrUpgrade nodejs-patternflyUpgrade nodejs-is-unc-pathUpgrade python-cryptoUpgrade hawkular-openshift-agentUpgrade thriftUpgrade jenkins-plugin-pipeline-model-apiUpgrade nodejs-inheritsUpgrade nodejs-jsonpointerUpgrade jenkins-plugin-structsUpgrade nodejs-cookie-signatureUpgrade jenkins-plugin-pipeline-stage-tags-metadataUpgrade nodejs-grunt-contrib-cleanUpgrade nodejs-graceful-fsUpgrade jenkins-plugin-blueocean-commonsUpgrade cri-oUpgrade nodejs-ctypeUpgrade jenkins-plugin-junitUpgrade jenkins-plugin-durable-taskUpgrade python-kubernetesUpgrade nodejs-extendUpgrade jenkins-plugin-credentialsUpgrade jenkins-plugin-jackson2-apiUpgrade elasticsearchUpgrade nodejs-amdefineUpgrade jenkins-plugin-workflow-multibranchUpgrade nodejs-commanderUpgrade jenkins-plugin-blueocean-git-pipelineUpgrade jenkins-plugin-openshift-clientUpgrade jenkins-plugin-blueocean-github-pipelineUpgrade nodejs-finalhandlerUpgrade nodejs-caselessUpgrade jenkins-plugin-openshift-sync | Jun 18, 2018 | Nov 28, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub