An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access the metrics stored from the original "MyProject" instance.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-10-17T00:00:00

Updated: 2024-08-05T16:04:11.756Z

Reserved: 2017-04-05T00:00:00

Link: CVE-2017-7517

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-17T16:15:14.710

Modified: 2024-11-21T03:32:03.550

Link: CVE-2017-7517

cve-icon Redhat

Severity : Low

Publid Date: 2017-04-25T00:00:00Z

Links: CVE-2017-7517 - Bugzilla