Known vulnerabilities in openshift-ansible (Red Hat package) - page 11

Vendor: Red Hat Inc.
Software: openshift-ansible (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 223
Public exploits: 17
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 223 known vulnerabilities: 18 high, 139 medium, 66 low Critical High Medium Low

Vulnerabilities (223)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53399 - Security Features
CVE-2021-30465		 CWE-254 Low
No
No
 3.11.452-1.git.0.304c046.el7 20.05.2021 SB2021052013
SB2021052014
SB2021052015
and 34 more
#VU52495 - Permissions, Privileges, and Access Controls
CVE-2021-21645		 CWE-264 Low
No
No
 3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52494 - Cross-Site Request Forgery (CSRF)
CVE-2021-21644		 CWE-352 Low
No
No
 3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52493 - Permissions, Privileges, and Access Controls
CVE-2021-21643		 CWE-264 Low
No
No
 3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU51604 - Improper Validation of Certificate with Host Mismatch
CVE-2021-28363		 CWE-297 Medium
No
No
 3.11.420-1.git.0.336dcef.el7 22.03.2021 SB2021032215
SB2021052523
SB2021071501
and 9 more
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615		 CWE-367 Medium
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611		 CWE-79 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610		 CWE-79 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608		 CWE-79 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603		 CWE-79 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604		 CWE-91 Medium
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602		 CWE-200 Medium
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605		 CWE-22 Medium
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606		 CWE-264 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607		 CWE-119 Medium
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609		 CWE-264 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU34130 - Permissions, Privileges, and Access Controls
CVE-2020-8559		 CWE-264 Medium
Available
No
 3.11.346-1.git.0.f65cc70.el7 22.07.2020 SB2020072221
SB2020120203
SB2020121809
and 6 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 49 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 4.5.0-202102031005.p0.git.0.c6839a2.el7, 4.6.0-202102031649.p0.git.0.bf90f86.el7 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU35005 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1002102		 CWE-601 Low
No
No
 3.11.346-1.git.0.f65cc70.el7 05.12.2019 SB2019120529
SB2020121809
SB2020010218


Showing elements 201 - 220 out of 223