WID-SEC-W-2022-1401

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat OpenShift (Migration Toolkit for Containers): Mehrere Schwachstellen

view advisory published 2022-09-12

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-0691US	critical9.8	2.22% (83rd)	—	2022-02-21
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
CVE-2022-0686US	critical9.1	1.83% (79th)	—	2022-02-20
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
CVE-2022-0639US	medium5.3	1.54% (75th)	—	2022-02-17
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
CVE-2022-0512US	medium5.3	1.78% (78th)	—	2022-02-14
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

references

External citations — patches, advisories, analysis.

Red Hat Security Advisory vom 2022-09-12external
Debian Security Advisory DLA-3336 vom 2023-02-23external
Debian Security Advisory DLA-4413 vom 2025-12-16external
WID-SEC-W-2022-1401 - CSAF Versionself
WID-SEC-2022-1401 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan