First published: Tue Dec 14 2021(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>Security Fix(es):<br><li> log4j-core: Remote code execution in Log4j 2.x when logs contain an</li> attacker-controlled string value (CVE-2021-44228)<br>For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE<br>page(s)<br>listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat OpenShift Container Platform for IBM LinuxONE | >=3.11.z |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:5094 is classified as moderate.
To fix RHSA-2021:5094, it is recommended to apply the latest security updates provided by Red Hat for OpenShift Container Platform.
The impact of RHSA-2021:5094 includes potential remote code execution vulnerability due to issues in log4j-core.
RHSA-2021:5094 affects specific versions of Red Hat OpenShift Container Platform that utilize log4j 2.x.
RHSA-2021:5094 specifically involves the log4j-core component, which is responsible for logging in Java applications.