DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Advanced Cluster Management: Mehrere Schwachstellen
view advisory published 2022-06-27
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen oder Informationen offenzulagen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29526US | medium5.3 | — | ||
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a f… | ||||
| CVE-2022-25645US | high8.1 | — | ||
All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path co… | ||||
| CVE-2022-29810US | medium5.5 | — | ||
The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter. | ||||
| CVE-2022-21803US | high7.5 | — | ||
This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:5069 vom 2022-08-10external
- RedHat Security Advisory vom 2022-06-27external
- Red Hat Security Advisory RHSA-2022:5337 vom 2022-07-01external
- Red Hat Security Advisory RHSA-2022:5392 vom 2022-06-28external
- Red Hat Security Advisory RHSA-2022:5699 vom 2022-07-29external
- Red Hat Security Advisory RHSA-2022:5840 vom 2022-08-02external
- Red Hat Security Advisory RHSA-2022:6714 vom 2022-09-26external
- Amazon Linux Security Advisory ALAS2-2022-1858 vom 2022-10-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan