7.4
High
CVE-2022-3259 Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks
Description
Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Openshift | 4.9.0 | No fix stated |
Other CVEs of Openshift
The 12 CVEs of Openshift →
CVE-2022-4145
A content spoofing flaw was found in OpenShift's OAuth endpoint
4.3
Medium
CVE-2023-3089
A compliance problem was found in the Red Hat OpenShift Container Platform
7.0
High
CVE-2022-3262
A flaw was found in Openshift
8.1
High
CVE-2022-3260
The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack
4.8
Medium