CVE-2019-3818

CVE-2019-3818 describes a vulnerability in kube-rbac-proxy versions prior to 0.4.1, affecting Red Hat OpenShift Container Platform, where TLS configurations are not honored, permitting insecure ciphers and TLS 1.0. This allows an attacker to potentially compromise the encryption of traffic sent over a weakly configured TLS connection. Rated with a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and low attack complexity, with a potential for high confidentiality impact. The EPSS score is low, indicating a minimal likelihood of exploitation. Currently, there is no evidence of active exploitation, and no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are also absent, suggesting a low level of public attention.