CVE-2017-15137

—

CVSS 3.0

5.3 medium

EPSS

<1%p60

Published

Jul 16, 2018 (Jul 16, 2018)

Modified

Jun 17, 2026

Description

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed.

Vendors: redhat
Products: openshift, openshift container platform
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.