Vulnerability Details CVE-2019-10150
It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.1%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
- https://access.redhat.com/errata/RHSA-2019:2989
- https://access.redhat.com/errata/RHSA-2019:3007
- https://access.redhat.com/errata/RHSA-2019:3143
- https://access.redhat.com/errata/RHSA-2019:3811
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10150
- https://docs.openshift.com/container-platform/3.11/dev_guide/builds/build_inputs.html#source-secrets-ssh-key-authentication
- https://access.redhat.com/errata/RHSA-2019:2989
- https://access.redhat.com/errata/RHSA-2019:3007
- https://access.redhat.com/errata/RHSA-2019:3143
- https://access.redhat.com/errata/RHSA-2019:3811
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10150
- https://docs.openshift.com/container-platform/3.11/dev_guide/builds/build_inputs.html#source-secrets-ssh-key-authentication
Products affected by CVE-2019-10150
-
cpe:2.3:a:redhat:openshift_container_platform:3.10
-
cpe:2.3:a:redhat:openshift_container_platform:3.11
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.104
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.117
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.129
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.135
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.141
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.146
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.153
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.154
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.157
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.161
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.170
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.188
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.200
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.216
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.219
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.232
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.248
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.272
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.286
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.306
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.317
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.318
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.346
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.374
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.380
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.394
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.404
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.420
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.43
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.439
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.51
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.59
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.69
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.82
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.88
-
cpe:2.3:a:redhat:openshift_container_platform:3.11.98
-
cpe:2.3:a:redhat:openshift_container_platform:3.6
-
cpe:2.3:a:redhat:openshift_container_platform:3.7
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.14
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.23
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.42-2
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.44
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.46
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.52
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.53
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.54
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.57
-
cpe:2.3:a:redhat:openshift_container_platform:3.7.61
-
cpe:2.3:a:redhat:openshift_container_platform:3.8
-
cpe:2.3:a:redhat:openshift_container_platform:3.9
-
cpe:2.3:a:redhat:openshift_container_platform:3.9.31
-
cpe:2.3:a:redhat:openshift_container_platform:4.0
-
cpe:2.3:a:redhat:openshift_container_platform:4.1