점검 대응높음KEV 미등록
CVE-2026-46579
Red Hat Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.2, Red Hat OpenShift Container Platform 4.21 취약점
A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.
- 대응 우선순위
- 점검
- CVSS
- 7.5
- EPSS
- 0.34% 백분위 26.6% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.05.29