DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift Service Mesh: Mehrere Schwachstellen
view advisory published 2022-05-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24773US | medium5.3 | — | ||
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not… | ||||
| CVE-2022-24772US | high7.5 | — | ||
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not… | ||||
| CVE-2022-24771US | high7.5 | — | ||
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code is lenien… | ||||
| CVE-2021-44906US | critical9.8 | Exploit | ||
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). | ||||
| CVE-2022-0536US | medium5.9 | — | ||
Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. | ||||
| CVE-2022-0235US | medium6.1 | — | ||
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:1739 vom 2022-05-05external
- Red Hat Security Advisory RHSA-2022:5069 vom 2022-08-10external
- Red Hat Security Advisory RHSA-2022:5392 vom 2022-06-28external
- Red Hat Security Advisory RHSA-2022:6156 vom 2022-08-24external
- Red Hat Security Advisory RHSA-2022:6813 vom 2022-10-05external
- Red Hat Security Advisory RHSA-2022:6835 vom 2022-10-06external
- Red Hat Security Advisory RHSA-2022:8652 vom 2022-11-28external
- Red Hat Security Advisory RHSA-2023:0612 vom 2023-02-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan