CVE-2019-3818

State: Published
Severity: 3.7 Low
Published: Feb 5, 2019
Updated: Aug 4, 2024
Reserved: Jan 3, 2019

Description

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption.

Scores

CVSS	Score	Vector	Source
3.0	3.7 Low	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	redhat

Weaknesses

CWE-327

Affected Products

Product	Versions
kube-rbac-proxy[UNKNOWN]	0.4.1Affected

References

https://access.redhat.com/security/cve/CVE-2019-3818
106744vdb-entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3818
RHBA-2019:0327vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.