https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:39:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373048 EUVD-2026-373048 https://cve.radiocsirt.org/vuln/euvd-2026-373048 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45497 <p>A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node&#39;s /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories. The mount is not read-only, which allows the attacker to overwrite it. By modifying the config.json file, the attacker can cause a denial of service by preventing the node from pulling new images and potentially exfiltrating sensitive secrets. This flaw impacts the availability of services dependent on image pulls and exposes sensitive information to unauthorized parties.</p> <p>A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node&#39;s /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories. The mount is not read-only, which allows the attacker to overwrite it. By modifying the config.json file, the attacker can cause a denial of service by preventing the node from pulling new images and potentially exfiltrating sensitive secrets. This flaw impacts the availability of services dependent on image pulls and exposes sensitive information to unauthorized parties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45497 https://cve.radiocsirt.org/vuln/ghsa-9786-79mw-2pj9 <p>A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node&#39;s /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories. The mount is not read-only, which allows the attacker to overwrite it. By modifying the config.json file, the attacker can cause a denial of service by preventing the node from pulling new images and potentially exfiltrating sensitive secrets. This flaw impacts the availability of services dependent on image pulls and exposes sensitive information to unauthorized parties.</p> <p>A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node&#39;s /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories. The mount is not read-only, which allows the attacker to overwrite it. By modifying the config.json file, the attacker can cause a denial of service by preventing the node from pulling new images and potentially exfiltrating sensitive secrets. This flaw impacts the availability of services dependent on image pulls and exposes sensitive information to unauthorized parties.</p> https://cve.radiocsirt.org/vuln/ghsa-9786-79mw-2pj9 https://cve.radiocsirt.org/vuln/rhsa-2025:10270 <p>openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials</p> <p>openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10270 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1413 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in der Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in der Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1413