Veille CVE

Recherche « Red Hat mirror registry for Red Hat OpenShift 2 »

4 CVE

Critique 0 Élevée 2 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Red Hat mirror registry for Red Hat OpenShift 2 » ✕
  1. CVE-2026-85471 6.4 Moyenne

    Red Hat mirror registry for Red Hat OpenShift · Red Hat mirror registry for Red Hat OpenShift 2 · Red Hat Quay 3

    A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery (SSRF) vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such as cloud metadata services or other services within the cluster. Consequently, this could lead to the disclosure of sensitive information from these internal services.

  2. CVE-2026-96577 7.1 Élevée

    Red Hat OpenShift Container Platform 4.18 · Red Hat OpenShift Container Platform 4.19 · Red Hat OpenShift Container Platform 4.20 · Red Hat OpenShift Container Platform 4.21

    A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.

  3. CVE-2026-75939 7.4 Élevée

    Red Hat OpenShift Container Platform 4.18 · Red Hat OpenShift Container Platform 4

    A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature verification. A remote attacker, by intercepting or manipulating network traffic to the signature endpoint, could exploit this to craft a PGP message with a valid Red Hat release key ID but a forged signature. This enables the `oc-mirror` tool to accept and mirror a malicious release payload into a disconnected registry, potentially compromising the integrity of software deployments.

  4. CVE-2026-15927 6.8 Moyenne

    Red Hat Quay 3.10 · Red Hat Quay 3.12 · Red Hat Quay 3.14 · Red Hat Quay 3.15

    A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). A repository administrator can supply a crafted hostname that causes the Quay mirror worker to make requests via Skopeo to internal network services, cloud metadata endpoints, or other resources not intended to be reachable from the Quay application.