Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/topology-aware-lifecycle-manager-rhel8-operator

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertionsCVE-2021-41803 · GHSA-HR3V-8CP3-68RFVersion ranges need review. github.com/hashicorp/consulRed Hat OpenShift Container Platform 4/openshift4/ose-grafana GoRed Hat High Fix reported
Command Injection Vulnerability with Mercurial in VCSCVE-2022-21235 · GHSA-6635-C626-VJ4RVersion ranges need review. github.com/Masterminds/vcsOpenShift Serverless/openshift-serverless-1/ingress-rhel8-operator GoRed Hat Critical Fix reported
Hashicorp Nomad Information Exposure Through Environmental VariablesCVE-2019-14802 · GHSA-6HV3-7C34-4HX8Version ranges need review. github.com/hashicorp/nomadRed Hat OpenShift Container Platform 4/openshift4/topology-aware-lifecycle-manager-rhel8-operator GoRed Hat Medium Fix reported
HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0CVE-2021-38553 · GHSA-23FQ-Q7HC-993RVersion ranges need review. github.com/hashicorp/vaultRed Hat OpenShift Container Platform 4/openshift4/ose-installer GoRed Hat Critical Fix reported
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vectorCVE-2022-29153 · GHSA-Q6H7-4QGW-2J9PVersion ranges need review. github.com/hashicorp/consulLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-loki-rhel9 GoRed Hat High Fix reported
HashiCorp Vault's revocation list not respectedCVE-2022-41316 · GHSA-9MH8-9J64-443FVersion ranges need review. github.com/hashicorp/vaultRed Hat OpenShift Container Platform 4/openshift4/topology-aware-lifecycle-manager-rhel8-operator GoRed Hat Medium Fix reported
HashiCorp Consul vulnerable to authorization bypassCVE-2022-40716 · GHSA-M69R-9G56-7MV8Version ranges need review. github.com/hashicorp/consulRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 GoRed Hat Medium Fix reported
Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp VaultCVE-2021-38554 · GHSA-6239-28C2-9MRMVersion ranges need review. github.com/hashicorp/vaultRed Hat OpenShift Container Platform 4/openshift4/ose-installer GoRed Hat Medium Fix reported
HashiCorp Consul Template could reveal Vault secret contents in error messagesCVE-2022-38149 · GHSA-8449-7GC2-PWRPVersion ranges need review. github.com/hashicorp/consul-templateRed Hat OpenShift Container Platform 4/openshift4/topology-aware-lifecycle-manager-rhel8-operator GoRed Hat High Fix reported