RHSA-2021:1544

csafUSredhat_csaf

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update

view advisory published 2021-05-11

An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-3495UShigh8.8—
An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allows an attacker with a basic level of access to the clust…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • Fixedopenshift-service-mesh/kiali-rhel8-operator@sha256:008c541f7d9e0f690a56f998eadf80f11f26f0ebfc8c5b337e4647c4240883b5_amd64 as a component of OpenShift Service Mesh 2.0

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:1544
  • Fixedopenshift-service-mesh/kiali-rhel8-operator@sha256:12df558c629c0d7b1aae727890c8d9825b974bc47a5e38a960f7844832cfdb20_s390x as a component of OpenShift Service Mesh 2.0

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:1544
  • Fixedopenshift-service-mesh/kiali-rhel8-operator@sha256:f52afede9a2b48935b87368d402890aad3990d588938aecfa7432a6dfb94e34a_ppc64le as a component of OpenShift Service Mesh 2.0

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:1544
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan