medium4.3
CVE-2017-15137
The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example.
Impact
The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openshift | All versions |
| Redhat | Openshift Container Platform | Version 3.9 |