vulnerability

Red Hat OpenShift: CVE-2017-15137: atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Jun 18, 2018
Added
Jun 18, 2018
Modified
Aug 11, 2025

Description

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

Solution

linuxrpm-upgrade-atomic-openshift
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.