RHSA-2024:4269: Moderate: OpenShift Virtualization 4.12.12 Images security update

Published Jul 2, 2024

Updated

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.This advisory contains OpenShift Virtualization 4.12.12 images.Security Fix(es): axios: exposure of confidential data stored in cookies (CVE-2023-45857) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Virtualization

Remediation

Event History

Jul 2, 2024

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2024:4269?

The severity of RHSA-2024:4269 is categorized according to the impact and exploitability of the vulnerabilities it addresses.

How do I fix RHSA-2024:4269?

To fix RHSA-2024:4269, you should upgrade to the latest OpenShift Virtualization 4.12.12 images provided in the advisory.

What vulnerabilities are addressed in RHSA-2024:4269?

RHSA-2024:4269 addresses vulnerabilities including a data exposure issue in axios (CVE-2023-45857).

Which products are affected by RHSA-2024:4269?

RHSA-2024:4269 primarily affects the OpenShift Virtualization solution within the Red Hat OpenShift Container Platform.

Is RHSA-2024:4269 related to data security?

Yes, RHSA-2024:4269 includes a security fix for the exposure of confidential data stored in cookies.