Where
-Infinity
0
Severity
9
Path Traversal

Critical: ACS 4.3 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.3, you are advised to upgrade to patch release 4.3.6.
First published (updated )
Severity
9

Critical: ACS 4.6.2 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.6, you are advised to upgrade to this patch release 4.6.2
First published (updated )
Severity
7.8
Path Traversal
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.

1 / 2
Source: NVD
First published (updated )
Severity
7

Important: RHACS 3.74 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 3.74, you are advised to upgrade to patch release 3.74.8.
First published (updated )
Severity
7

Important: ACS 4.1 enhancement update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.6.
First published (updated )
Severity
7

Important: ACS 4.4 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS, you are advised to upgrade to release 4.4.
First published (updated )
Severity
7

Important: RHACS 4.4 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.4, you are advised to upgrade to patch release 4.4.2.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Security for Kubernetes 3.73 security update

1 / 2

Remedy

If you are using an earlier version of RHACS 3.73, you are advised to upgrade to patch release 3.73.5.
First published (updated )
Severity
7

Important: ACS 4.0 enhancement and security update

1 / 2

Remedy

For details on how to apply this update, which includes the changes described in this advisory, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: ACS 4.5 enhancement update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.5.
First published (updated )
Severity
7
XSS

Important: ACS 4.5 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.6.
First published (updated )
Severity
7

Important: ACS 4.5 enhancement update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to patch release 4.5.7.
First published (updated )
Severity
7

Important: ACS 4.5 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to patch release 4.5.8.
First published (updated )
Severity
7

Important: ACS 4.6 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.6, you are advised to upgrade to this patch release 4.6.4.
First published (updated )
Severity
7

Important: ACS 4.7 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.7, you are advised to upgrade to patch release 4.7.1.
First published (updated )
Severity
7
Race Condition

Important: ACS 4.6 enhancement and security update

Remedy

If you are using an earlier version of RHACS 4.6, you are advised to upgrade to patch release 4.6.5.
First published (updated )
Severity
7

Important: RHACS 4.7 security update

Remedy

If you are using an earlier version of RHACS 4.7, you are advised to upgrade to this patch release 4.7.2.
First published (updated )
Severity
7

Important: ACS 4.5 enhancement and security update

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to patch release 4.5.9.
First published (updated )
Severity
7

In Red Hat Advanced Cluster Security for Kubernetes, it was found that Notifier secrets were not properly sanitized in the GraphQL API. Authenticated ACS users could exploit this by retrieving Notifiers from the GraphQL API, revealing secrets that could then be used to escalate their privileges.

https://github.com/stackrox/stackrox/pull/1803

First published (updated )
Severity
7

Important: RHACS 4.1 enhancement and security update

1 / 2

Remedy

If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.4.
First published (updated )
Severity
7

Important: ACS 4.2 enhancement and security update

Remedy

If you are using an earlier version of RHACS 4.2, you are advised to upgrade to patch release 4.2.2.
First published (updated )
Severity
7

Important: RHACS 4.0 enhancement and security update

1 / 2

Remedy

If you are using an earlier version of RHACS 4.0, you are advised to upgrade to patch release 4.0.5.
First published (updated )
Severity
7

Important: RHACS 3.74 enhancement and security update

1 / 2

Remedy

If you are using an earlier version of RHACS 3.74, you are advised to upgrade to patch release 3.74.7.
First published (updated )
Severity
6.1
AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.

1 / 2
Source: MITRE
First published (updated )
Severity
4

Moderate: RHACS 4.5 enhancement and security update

1 / 2
Source: Red Hat

Remedy

To take advantage of the new features, bug fixes, and enhancements in RHACS 4.5, you are advised to upgrade to RHACS 4.5.0.
First published (updated )
Severity
4

Moderate: ACS 4.5 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.2.
First published (updated )
Severity
4

Moderate: RHACS 4.5 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to this patch release 4.5.3.
First published (updated )
Severity
4

Moderate: ACS 4.6 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS, you are advised to upgrade to release 4.6.
First published (updated )
Severity
4

Moderate: ACS 4.7 enhancement and security update

1 / 2
Source: Red Hat

Remedy

If you are using an earlier version of RHACS, you are advised to upgrade to this release 4.7.0.
First published (updated )
Severity
4

Moderate: RHACS 4.3 enhancement and security update

1 / 2

Remedy

If you are using an earlier version of RHACS 4.3, you are advised to upgrade to patch release 4.3.1.
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203