There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.
    (CVE-2015-7528)

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2015:2544 公告中提及的漏洞的影响。

  - OpenShift：pod 日志位置必须验证提供的容器 (CVE-2015-7528)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2015:2544 公告中提及的弱點影響。

  - OpenShift：pod 記錄位置必須驗證容器 (若提供) (CVE-2015-7528)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

リモート Redhat Enterprise Linux 7 ホストに、RHSA-2015:2544 アドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

  - OpenShift: ポッドログの場所が提供されている場合は、コンテナを検証する必要があります (CVE-2015-7528)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2544 advisory.

    OpenShift Enterprise by Red Hat is the company's cloud computing     Platform-as-a-Service (PaaS) solution designed for on-premise or     private cloud deployments.

    It was found that OpenShift's API back end did not verify requests for     pod log locations, allowing a pod on a Node to request logs for any     other pod on that Node. A remote attacker could use this flaw to view     sensitive information via pod logs that they would normally not have     access to. (CVE-2015-7528)

    This issue was discovered by Jordan Liggitt of Red Hat Atomic OpenShift.

    All OpenShift Enterprise 3.0 and 3.1 users are advised to upgrade to     these updated packages, which correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
417088	SCA: security update for github.com/kubernetes/kubernetes (GHSA-mqf3-28j7-3mj6)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	medium
417088	SCA: security update for github.com/kubernetes/kubernetes (GHSA-mqf3-28j7-3mj6)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	medium
119365	RHEL 7：openshift (RHSA-2015:2544)	Nessus	Red Hat Local Security Checks	2018/12/4	2024/6/3	medium
119365	RHEL 7：openshift (RHSA-2015:2544)	Nessus	Red Hat Local Security Checks	2018/12/4	2024/6/3	medium
119365	RHEL 7：openshift（RHSA-2015:2544）	Nessus	Red Hat Local Security Checks	2018/12/4	2024/6/3	medium
119365	RHEL 7 : openshift (RHSA-2015:2544)	Nessus	Red Hat Local Security Checks	2018/12/4	2024/6/3	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium