Security Advisory catalog CVE-2026-46579
cve-program · CVE-2026-46579 Published
A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2026-46579 Published openshift4/ose-haproxy-router https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.12",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router",
"defaultStatus": "affected",
"versions": [
{
"version": "1784323891",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.12::el9"
]
} openshift4/ose-haproxy-router https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.13",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router",
"defaultStatus": "affected",
"versions": [
{
"version": "1784056734",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
]
} openshift4/ose-haproxy-router https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.14",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router",
"defaultStatus": "affected",
"versions": [
{
"version": "1784587649",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
]
} openshift4/ose-haproxy-router https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.15",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router",
"defaultStatus": "affected",
"versions": [
{
"version": "1784580646",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.16",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1784331638",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.17",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1784321465",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1783719377",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.19",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1783445642",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.20",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1781639027",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.21",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1781552170",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
]
} openshift4/ose-haproxy-router-rhel9 https://catalog.redhat.com/software/containers/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/ose-haproxy-router-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1781643967",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
]
} Original source record · Cite this exact observation · Complete original publisher JSON