Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.10 Jaeger and Kiali security update
An update for Jaeger and Kiali is now available for Openshift Service Mesh 1.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-1762US | high8.6 | — | ||
An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by s… | ||||
| CVE-2020-8124US | medium5.3 | — | ||
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- Behobenjaeger-0:v1.13.1.redhat6-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenjaeger-0:v1.13.1.redhat6-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenjaeger-0:v1.13.1.redhat6-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenjaeger-0:v1.13.1.redhat6-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenkiali-0:v1.0.10.redhat1-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenkiali-0:v1.0.10.redhat1-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenkiali-0:v1.0.10.redhat1-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972 - Behobenkiali-0:v1.0.10.redhat1-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan