vulnerability
Red Hat OpenShift: CVE-2019-10150: atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Jun 12, 2019 | Oct 15, 2019 | Mar 30, 2026 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jun 12, 2019
Added
Oct 15, 2019
Modified
Mar 30, 2026
Description
It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.
Solutions
linuxrpm-upgrade-atomic-openshiftlinuxrpm-upgrade-cri-o
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.