RHSA-2022:5132: Important: RHACS 3.68 security update
Release of RHACS 3.68.2<br>Security Fix(es):<br><li> stackrox: Improper sanitization allows users to retrieve Notifier secrets from GraphQL API in plaintext (CVE-2022-1902)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:5132?
The severity of RHSA-2022:5132 is rated as critical due to improper sanitization allowing sensitive information exposure.
How do I fix RHSA-2022:5132?
To fix RHSA-2022:5132, update your system to the latest version as recommended in the security advisory.
What vulnerabilities are addressed in RHSA-2022:5132?
RHSA-2022:5132 addresses CVE-2022-1902, which involves improper sanitization that allows retrieval of Notifier secrets from the GraphQL API.
What is CVE-2022-1902?
CVE-2022-1902 is a vulnerability that allows users to retrieve sensitive Notifier secrets in plaintext through the GraphQL API.
Who is affected by RHSA-2022:5132?
RHSA-2022:5132 affects users of Red Hat Advanced Cluster Security for Kubernetes (RHACS) version 3.68.2.