RHSA-2022:5189: Important: RHACS 3.70 security update

Published Jun 27, 2022

Updated

Release of ACS 3.70.1Security Fix(es): stackrox: Improper sanitization allows users to retrieve Notifier secrets from GraphQL API in plaintext (CVE-2022-1902) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat RHACS

Remediation

Event History

Jun 27, 2022

Advisory Published

12:00 AM

Data Sourced

12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2022:5189?

The severity of RHSA-2022:5189 is classified as important due to improper sanitization vulnerabilities.

What vulnerabilities are addressed in RHSA-2022:5189?

RHSA-2022:5189 addresses the CVE-2022-1902 vulnerability in stackrox allowing unauthorized access to Notifier secrets.

How do I fix RHSA-2022:5189?

To fix RHSA-2022:5189, you should upgrade your installation to the latest version provided in the release notes.

What does CVE-2022-1902 exploit in RHSA-2022:5189?

CVE-2022-1902 exploits improper sanitization in the GraphQL API, potentially exposing Notifier secrets in plaintext.

Is RHSA-2022:5189 applicable to all versions of ACS?

RHSA-2022:5189 is specifically relevant to ACS 3.70.1 and may not affect other versions.