vulnerability
Red Hat OpenShift: CVE-2017-15137: atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Jun 18, 2018 | Jun 18, 2018 | Aug 11, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Jun 18, 2018
Added
Jun 18, 2018
Modified
Aug 11, 2025
Description
The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.
Solution
linuxrpm-upgrade-atomic-openshift
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.