Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/ose-logging-elasticsearch6

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Exposure of Sensitive Information to an Unauthorized Actor in Apache SantuarioCVE-2021-40690 · GHSA-J8WC-GXX9-82HX org.apache.santuario:xmlsecLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
Local Information Disclosure Vulnerability in Netty on Unix-Like systemsCVE-2021-21290 · GHSA-5MCR-GQ6C-3HQ2 io.netty:netty-codec-httpio.netty:netty MavenRed Hat Medium Fix reported
Deeply nested json in jackson-databindCVE-2020-36518 · GHSA-57J2-W4CX-62H2 com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind MavenRed Hat High Fix reported
Improper Check for Unusual or Exceptional Conditions in json-smartCVE-2021-27568 · GHSA-V528-7HRM-FRQP net.minidev:json-smart-mininet.minidev:json-smart MavenRed Hat Medium Fix reported
Possible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409 · GHSA-F256-J965-7F32 io.netty:netty-codec-http2io.netty:netty MavenRed Hat Medium Fix reported
HTTP request smuggling in nettyCVE-2021-43797 · GHSA-WX5J-54MM-RQQQ io.netty:netty-codec-httpio.netty:netty MavenRed Hat Medium Fix reported
Local Information Disclosure Vulnerability in io.netty:netty-codec-httpCVE-2022-24823 · GHSA-269Q-HMXG-M83Q io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
Bzip2Decoder doesn't allow setting size restrictions for decompressed dataCVE-2021-37136 · GHSA-GRG4-WF29-R9VV io.netty:netty-codecio.netty:netty MavenRed Hat High Fix reported
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary wayCVE-2021-37137 · GHSA-9VJP-V76F-G363 io.netty:netty-codecio.netty:netty MavenRed Hat High Fix reported
Information Disclosure in GuavaCVE-2020-8908 · GHSA-5MG8-W23W-74H3 com.google.guava:guavaRed Hat Enterprise Linux 7/guava MavenRed Hat Low Fix reported
Sandbox Bypass in Apache Velocity EngineCVE-2020-13936 · GHSA-59J4-WJWP-MW9M org.apache.velocity:velocity-engine-parentorg.apache.velocity:velocity MavenRed Hat High Fix reported
Code Injection in jackson-databindCVE-2020-24616 · GHSA-H3CW-G4MQ-C5X2 com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind MavenRed Hat High Fix reported
Infinite loop in Apache CFXCVE-2021-30468 · GHSA-G23V-P5JQ-JVH4 org.apache.cxf:apache-cxforg.apache.cxf:cxf MavenRed Hat High Fix reported
Possible request smuggling in HTTP/2 due missing validationCVE-2021-21295 · GHSA-WM47-8V5P-WJPJ io.netty:netty-codec-http2io.netty:netty MavenRed Hat Medium Fix reported
Elasticsearch privilege escalationCVE-2022-23708 · GHSA-PGQ6-CCQJ-HPQR org.elasticsearch:elasticsearchLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
Denial of Service (DoS) in Jackson Dataformat CBORCVE-2020-28491 · GHSA-XMC8-26Q4-QJHX com.fasterxml.jackson.dataformat:jackson-dataformat-cborRed Hat Integration Camel Quarkus 1/jackson-dataformat-cbor MavenRed Hat High Fix reported