VULNERABILITY INTELLIGENCE

CVE-2019-10150

CVSS score5.9 MEDIUM
EPSS probability1.39%
CISA KEVNot currently listed
Published2019-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

Description

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.

Weakness classification

  • CWE-287: Improper Authentication

Primary references