Veille CVE

Recherche « Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 »

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 » ✕
  1. CVE-2026-96577 7.1 Élevée

    Red Hat OpenShift Container Platform 4.18 · Red Hat OpenShift Container Platform 4.19 · Red Hat OpenShift Container Platform 4.20 · Red Hat OpenShift Container Platform 4.21

    A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.

  2. CVE-2026-101295 7.3 Élevée

    Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 · Red Hat OpenShift Container Platform 4

    Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.