RHSA-2021:1544

csafUSredhat_csaf

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update

Advisory ansehen veröffentlicht 2021-05-11

An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-3495UShigh8.8—
An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allows an attacker with a basic level of access to the clust…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • Behobenopenshift-service-mesh/kiali-rhel8-operator@sha256:008c541f7d9e0f690a56f998eadf80f11f26f0ebfc8c5b337e4647c4240883b5_amd64 as a component of OpenShift Service Mesh 2.0

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:1544
  • Behobenopenshift-service-mesh/kiali-rhel8-operator@sha256:12df558c629c0d7b1aae727890c8d9825b974bc47a5e38a960f7844832cfdb20_s390x as a component of OpenShift Service Mesh 2.0

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:1544
  • Behobenopenshift-service-mesh/kiali-rhel8-operator@sha256:f52afede9a2b48935b87368d402890aad3990d588938aecfa7432a6dfb94e34a_ppc64le as a component of OpenShift Service Mesh 2.0

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:1544
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan