CVE-2017-15137CWE-20

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example

Medium · published July 16, 2018

CVSS v3.0
4.3
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00991 · 62.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-07-16T20:00Z
EPSS history
Timeline
  • 16 JUL 20:00Z
    The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example
    cvelistv5