CVE-2019-14845

CVE-2019-14845 is a medium-severity vulnerability affecting OpenShift builds, versions 4.1 through 4.3, where TLS hostname verification is bypassed when extracting source from container images. This flaw allows a remote attacker to conduct a man-in-the-middle attack with high attack complexity, injecting malicious content into builds. The CVSS score is 5.3, indicating a moderate risk with potential for high impact on integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.