Red Hat Openshift Data Foundation 4/mcg-rhel8-operator
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS | github.com/hashicorp/vaultRed Hat OpenShift Container Platform 4/openshift4/ose-baremetal-installer-rhel9 | GoRed Hat | Medium | No fix reported | |
| HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations | github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/mcg-cli-rhel9 | GoRed Hat | High | No fix reported | |
| HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization | github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/mcg-cli-rhel9 | GoRed Hat | High | No fix reported | |
| HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-Service | github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/mcg-cli-rhel9 | GoRed Hat | High | No fix reported |