CVE-2017-15137

MEDIUM

OpenShift - Improper Input Validation in Image Import Whitelist

Title source: llm

Description

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

References (2)

Core 2

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15137

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHBA-2018:0489

Scores

CVSS v3 4.3

EPSS 0.0099

EPSS Percentile 58.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-20

Status published

Products (2)

redhat/openshift

redhat/openshift_container_platform 3.9

Published Jul 16, 2018

Tracked Since Feb 18, 2026