Latest redhat advanced cluster management for kubernetes Vulnerabilities

● CVE-2023-44487

- Rapid Reset HTTP/2 vulnerability

Microsoft Windows 11=21H2

Microsoft Windows Server 2022

Microsoft Windows 11=22H2

and 556 more

● CVE-2023-3027

The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (instead of the policy apply a static manifest on...

Redhat Advanced Cluster Management For Kubernetes=2.5

Redhat Advanced Cluster Management For Kubernetes=2.6

Redhat Advanced Cluster Management For Kubernetes=2.7

● CVE-2022-3841

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (R...

Redhat Advanced Cluster Management For Kubernetes=2.0

● CVE-2022-2238

A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw allows an attacker t...

Redhat Advanced Cluster Management For Kubernetes=2.0

● CVE-2022-3248

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.

Redhat Advanced Cluster Management For Kubernetes=2.0

Redhat Openshift Container Platform=4.0

● CVE-2022-27191

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

Golang Ssh<0.0.0-20220314234659-1baeb1ce4c0b

Fedoraproject Extra Packages For Enterprise Linux=8.0

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Fedoraproject Fedora=36

Redhat Advanced Cluster Management For Kubernetes=2.0

and 13 more

● CVE-2020-25655

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a shor...

Redhat Advanced Cluster Management For Kubernetes=2.0

● CVE-2020-25688

A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all i...

Redhat Advanced Cluster Management For Kubernetes<2.0.5

redhat/rhacm<2.0.5

redhat/rhacm<2.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.