[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flmgI_gOWMDvvhNgNLF4T_HALndSafcZt_qFWtqaB1Fc":3,"g5a-family:redhat\u002Fopenshift_data_science":70,"g5a-ex:redhat\u002Fopenshift_data_science@*":71},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":43,"seoMetadata":48,"meta":67},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"redhat","openshift_data_science",0,4,1,"2024-08-12",[],"Openshift Data Science by Redhat is a technology product and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,38],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2023-0923","A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues.","2023-09-15",9.8,"Critical",false,0.00937,{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":37},"CVE-2024-7557","A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.",8.8,0.00932,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":42},"CVE-2023-3361","A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster (ds pipeline server) and saves them in plain text in the generated output instead of an ID for a Kubernetes secret.","2023-10-04",0.0047,[44],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":45,"cisaDateAdded":20,"cisaShortDescription":46,"cisaRequiredAction":47},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":49,"metaDescription":50,"keywords":51,"structuredData":52},"Openshift Data Science by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openshift Data Science by Redhat with 4 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Openshift Data Science vulnerabilities, Openshift Data Science security, Openshift Data Science CVE, Redhat Openshift Data Science, Openshift Data Science threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Openshift Data Science KEV, Openshift Data Science exploited vulnerabilities",{"@context":53,"@type":54,"name":55,"description":50,"url":56,"manufacturer":57,"applicationCategory":61,"softwareVersion":62,"mainEntity":63},"https:\u002F\u002Fschema.org","SoftwareApplication","Openshift Data Science","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fopenshift_data_science",{"@type":58,"name":59,"url":60},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","Multiple versions",{"@type":64,"name":65,"description":66,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openshift Data Science Security Vulnerabilities","Security vulnerabilities affecting Openshift Data Science by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":68,"apiVersion":69},"2026-10-18T18:55:15.584Z","3.0",[],{"rows":72,"total":11,"capped":31,"failed":9},[73],{"cveId":18,"name":45,"severity":23,"cvss":21,"added":20,"epss":24,"published":74,"ranges":75,"checked":4,"hits":76,"covers":31},"2023-10-10T14:15:10.883",[],[]]