Known vulnerabilities in Red Hat OpenShift Container Platform 4.2.4

Version: 4.2.4
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_container_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat OpenShift Container Platform version 4.2.4 Red Hat OpenShift Container Platform 4.2.4 is affected by 15 vulnerabilities: 3 high, 1 medium, 11 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25999 - Incorrect Default Permissions
CVE-2019-19355
CWE-276 Low
No
No
4.3.5 11.03.2020 SB2020031125
SB2020031126
#VU25847 - Improper Access Control
CVE-2019-19921
CWE-284 Low
No
No
4.1.38, 4.2.22, 4.13.0, 4.13.4 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more
#VU25591 - Incorrect Default Permissions
CVE-2019-19351
CWE-276 Low
No
No
4.2.20, 4.3.3, 3.11.188 25.02.2020 SB2020022515
SB2020032010
#VU25501 - Use After Free
CVE-2020-8945
CWE-416 High
No
No
4.1.38, 4.2.22, 4.3.5, 4.3.8, 4.3.9, 4.4.3 21.02.2020 SB2020022110
SB2020031116
SB2020031126
and 23 more
#VU25335 - Incorrect Default Permissions
CVE-2019-19335
CWE-276 Low
No
No
4.2.18 13.02.2020 SB2020021333
#VU24692 - Out-of-bounds write
CVE-2019-13734
CWE-787 High
No
No
4.2.18 28.01.2020 SB2019122301
SB2020012805
SB2020012806
and 15 more
#VU23548 - Improper input validation
CVE-2019-11255
CWE-20 Low
No
No
4.1.27, 4.2.10 11.12.2019 SB2019121118
SB2019121117
SB2019121613
and 1 more
#VU23399 - Cleartext Storage of Sensitive Information
CVE-2019-10213
CWE-312 Low
No
No
4.1.26, 4.2.9, 4.1.27 04.12.2019 SB2019120412
SB2019121704
SB2020072802
#VU23389 - Cleartext Storage of Sensitive Information
CVE-2019-14854
CWE-312 Low
No
No
4.1.26, 4.2.9, 4.1.27, 4.2.10 04.12.2019 SB2019120412
SB2019121117
SB2019121704
#VU22712 - Memory corruption
CVE-2018-12207
CWE-119 Low
No
No
4.1.24, 4.2.5 12.11.2019 SB2019111221
SB2019111301
SB2019111332
and 38 more
#VU22482 - Permissions, Privileges, and Access Controls
CVE-2019-16884
CWE-264 Low
No
No
4.1.24, 4.2.9 01.11.2019 SB2019092516
SB2019092517
SB2019110111
and 19 more
#VU21782 - Permissions, Privileges, and Access Controls
CVE-2019-14287
CWE-264 Low
Public exploit available
No
4.1.24, 4.2.5 15.10.2019 SB2019101501
SB2019101502
SB2019101503
and 27 more
#VU21523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10432
CWE-79 Low
No
No
4.1.27, 4.2.10 03.10.2019 SB2019100404
SB2019121117
SB2019121612
and 1 more
#VU21522 - Permissions, Privileges, and Access Controls
CVE-2019-10431
CWE-264 High
No
No
4.1.27, 4.2.10 03.10.2019 SB2019100704
SB2019121117
SB2019121612
and 1 more
#VU21409 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16276
CWE-444 Medium
No
No
4.2.21 29.09.2019 SB2019092910
SB2019092911
SB2019111801
and 13 more