CVE-2020-15185

mediumpriority · track · 11EPSS 0.009 · 59 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.88% (59th) EPSS

CVSS 4 · medium

Is it mine?

86 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · osv · nvd

EPSS · scored 2026-10-27

In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker must have write access to the index file (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review the index file in the Helm repository cache before installing software.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedrhacm2/acm-must-gather-rhel8@sha256:5c1f5bf227a404698ad8f945d7b200f3777a392eee3e6a9c06fba7622e0ee15b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/acm-operator-bundle@sha256:96e323e923dfb556daadc87e990eb89277c21926e56e378bae60bf1d2a46931a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/acmesolver-rhel8@sha256:2b1b2de643bc640f6584b99c40fa414f0682c700af26ac81edd280474e0becf3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/application-ui-rhel8@sha256:2dcfc24dbc56c7fe2e5660533a03e5c3d18083c77544debe9fb10855e4c0e683_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/cainjector-rhel8@sha256:122ac673eb558e39d81e4c8f37f417a2804a992e238bd124e3ad449667f004f9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/cert-manager-controller-rhel8@sha256:99b5a408910f72442751509844d1b73e009d9c9d31fc4d71a65c5ff65bc047a8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/cert-manager-webhook-rhel8@sha256:6403fc5956fe0a17dd06a6bb2dc425b1134b9fad8ef408038fbb266541ea473b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/cert-policy-controller-rhel8@sha256:35908f061ba959c58ce42ed662f5170f3cdaf9b9ddbb8a80882d9a9bc986357f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/cert-policy-controller-rhel8@sha256:8af54d71b2bb7ef16cdedcaa612e35c3b8868466864de4320ba63fbf3b210a14_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/clusterlifecycle-state-metrics-rhel8@sha256:39ce3f885d935143e707334164730c410216986ad77bc7f47f0d80c197c33154_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/config-policy-controller-rhel8@sha256:7bb0788df3373dc6ec6ce1a94d5a10c6fa98d84c3976cdb821d23cc192648f76_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/config-policy-controller-rhel8@sha256:d11c8eae90b907afc899d8df71054c45f566c8a20989a8308984b35cb13dab2d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/configmap-watcher-rhel8@sha256:6cb892096f75930de60e794bd6bee7ce1c0a62818c90731f086a0dd8cee4f3f3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/console-api-rhel8@sha256:c31287c2517fc577beeb6a62d116377a4e76ad375a56b24447812261b58d7db6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/console-header-rhel8@sha256:585ab705d82e000d54d212beb554bcb34c85ab1c2b572394fda4fcd3e938c0c1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/console-rhel8@sha256:67611f34fb67e805cc2222c323ca3a8265bf4a4db28fcc48d9407d5563714259_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/console-ui-rhel8@sha256:306ce81352522d19ff4a7be8490fd951184b3d242ed37c3ef8ddf0c944910536_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/endpoint-component-rhel8-operator@sha256:6c3b71d0f176658dba995b6b14c075d97ae6eaabb45dbb8ba3df6729cf7be945_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/endpoint-component-rhel8-operator@sha256:d4447c55d4f4159fcc4ec8a49d29b9469f2a37cf994b34a2bab81f6fe6e24885_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/endpoint-monitoring-rhel8-operator@sha256:8fbeb763520ebecce39f94b4d1924dd0bea1d49432e20c60c0c2e4eceb7712aa_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/endpoint-monitoring-rhel8-operator@sha256:98be5349615560ba27d57a07e738565099f48982708762df39446725802d488f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/endpoint-rhel8-operator@sha256:3e74549bb298808ee5aeb72f3937c453e8c8d423f78bb213f6315b4beeeff9af_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-propagator-rhel8@sha256:4af1102e03d4bd3202b3ace7cca44a595ff6089692ec04d32968bca86a3a79d0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-spec-sync-rhel8@sha256:ba5eda5cc1458ace9ef4043bed6f7c53c951fd4e9718033a39dbbbc9006fc8c3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-spec-sync-rhel8@sha256:d46e133a0d5af0a0372fc9f888b0374b42176e9f78f74a1060c9d52812e4fc72_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-status-sync-rhel8@sha256:0989e2cfedebf94b17530d25490e850094131edd8c4e60d11b5253c13efd7ca0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-status-sync-rhel8@sha256:c7f6db15f2c0779004c25a444fee4b57291e0ce936d4b24e0a5ff9b06e15bdaa_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-template-sync-rhel8@sha256:5e652654b119a2734e0b3e037db43c6419036d5f679b55f5d68d762295dd2b61_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/governance-policy-template-sync-rhel8@sha256:8c3e9243494cb1609c8567f0fd826668f9b0e1938f040ee930ada78840eca899_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/grafana-dashboard-loader-rhel8@sha256:27fcab6f88de01839174be51259ac4ad1c4e6e9209102d06650520102c5c17ef_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/grc-ui-api-rhel8@sha256:4d647dcbaddf4999a377cfba1316b021378452851e72f33f2a5f31c892523e0e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/grc-ui-rhel8@sha256:4a625e2fb5193c086a44d837d9797fc0f6bf4fcab2f5347eb6f9918e144a3017_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/iam-policy-controller-rhel8@sha256:609e687488ffe40c2e67ad66c1f8907bba855fc272ea9cda7ff9464c75e4ecc9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/iam-policy-controller-rhel8@sha256:f15ed9e63fa99f49e4be3c3298d47d70864a1638f6e1e8e61ed64935bd757c48_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/klusterlet-addon-lease-controller-rhel8@sha256:733c1dba12f8f28e55c8b1b4b52a491d296ca5ec7cae95b818e7dab8b596fef0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/klusterlet-addon-lease-controller-rhel8@sha256:bf847f4025c7d12b7e2a45eba9fedbd0c6b1ffc2f55e49d78317df38e015f4c5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/klusterlet-operator-bundle@sha256:58b7976358bd5b30958602c820c5d3b0ba136e65fd7424ce92d23801dbd0976f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/kui-web-terminal-rhel8@sha256:42c126f0927932ce7c7758aa8a522429c15e93ffc4847bed4b341b9a3b892959_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/management-ingress-rhel7@sha256:36c1d7a86c689590747c17aafc7b5fea1b9938a8a42d235ef6d0024096a59e3a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/mcm-topology-api-rhel8@sha256:560c0155607c425cbbda68de24780950977798fb9352696ab2924e06df2f3f73_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/mcm-topology-rhel8@sha256:518f538c75cb11f6c9f405c9125b844028ae6f29c2c203177349f0c5b6fde94d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/memcached-exporter-rhel7@sha256:1cd4656a761b50580d396c52b5a0e0acd262d3436a0a7e87b719fe5d71ddd357_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/memcached-rhel8@sha256:185402d267fa5abf93ad908515c075fc58c37f19c83d8ef97e9484f998ef2a1b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/metrics-collector-rhel8@sha256:6d58c1334a85034e05dd03c04b861a44c50191c47d5c74102df3fdeb7412a148_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/metrics-collector-rhel8@sha256:cb4fe5410eb0cb1e0fb569749e37944beedfc1eeabfa3044c6511a2d1058b382_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicloud-manager-rhel8@sha256:28a966544227ad3d7b5f0bb9031cfb6c421de3bce13130d9e61f3f941df1093e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicloud-manager-rhel8@sha256:93f7c1cfe5d259aa075f52507a13b14f6336bda95bd790e7e23a042db3654299_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-observability-rhel8-operator@sha256:c7e38d7cfb6288eec6ef4ec1618310f35476c5d5da8b63681ea58909bbf8dfdd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-application-rhel8@sha256:7760f06c0c5fa72279c3cdd7d6afbb616a119ae0f3b5d2a3783c2a590bd02698_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-channel-rhel8@sha256:bd754ccfbb6d5c8f2eae6e07b3f34184f03527aef212a86290abd8dfec04e1cb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-deployable-rhel8@sha256:eb43962c35ac6d17ca59c2f24ce3e5093014b61f0b5f9dbe0199c414535e4436_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-placementrule-rhel8@sha256:faeee6c89555a746719b8a1611c527abd5da49a66ab59342a533c5a0b50398b9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-subscription-release-rhel8@sha256:461b14e62b28b817e939fd6aef070051ce3a71000bf62699fa473e0f9874f6e9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-subscription-rhel8@sha256:1f3e108437c8b961c563766ed78691c345afe5532c157ba5d1e72f276e12dc4b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multicluster-operators-subscription-rhel8@sha256:ece8a4ed8a71339a141f71b0c07387e7d434910bdb426670ca4b084c6b2f6241_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multiclusterhub-repo-rhel8@sha256:28a57c6750f835deff515f38d99e5819b83771df92ece97637e494c41d67d4a8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/multiclusterhub-rhel8@sha256:987767373f33569541c56af422b81b337cb61f74c1ba6dc67b2761c24825d2fc_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/observatorium-rhel8-operator@sha256:c0f252c25c8deddb83bb50b6b78ad9b4a407fa869560fddb50a7ba1c9df6bbdf_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/observatorium-rhel8@sha256:56402992850191559eaee814b9fec93b4d9124eb7f03e64755b7da50efa41df3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/openshift-hive-rhel7@sha256:8620fdd70b1bfe75672478ab66ea281d169f01f841af96e223688639cb6cf495_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/rbac-query-proxy-rhel8@sha256:78fae8b512367c24bf9d88d5e3fc4c48e8c69d67466b03ef188ad63391ae62d2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/rcm-controller-rhel8@sha256:43e753affcb3cf65ef6fc95794d5f1c5e1d815f44d393aa35b90df78b811ac91_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/redisgraph-tls-rhel8@sha256:c1b57728d62115701b41287169a480a4009c54bd745035197f47d6d78e740abc_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/registration-rhel8-operator@sha256:698f3b132c91e69f7ae82ad1ca512fe12f8a117ede50bb7c153d053de376b87d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/registration-rhel8-operator@sha256:c98fb9d078440ef1a5c409e47764e0a258d3db5c0f6146220e81626b1be14a5b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/registration-rhel8@sha256:6e9dffe60e99421f264a3afecb1a69c14a92b718e03df264cbb34e49fb30d4f9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/registration-rhel8@sha256:e87ffb5e4dc8de9c6702b835a75b47be65b239cacd96f395ab1ddb5427e5d322_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/search-aggregator-rhel7@sha256:05494b9176001926ff2c34aa296f15b16a08005931db05307c1bd29a0a017957_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/search-api-rhel8@sha256:8fdf69cea10b1ac4ad97a89795775a81d7eed3f2d37311aca9a1c8743cc7bc37_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/search-collector-rhel8@sha256:3c61d674f46eb8aa17da3759cc3459f0a985f67a41a0a5c9688b96e06a4245db_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/search-collector-rhel8@sha256:8c6d842cc905633ef7ea2a5bab30310b590a0ae35316fa0a4645a2d2c9af5a89_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/search-rhel8@sha256:ebbfc77d21411e83e265b2393951929cb633ea6e42419fee476cfa2fb3404d69_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/search-ui-rhel8@sha256:2e4e8bcc0867b0e897f5c435b44415ae1bdc2ab50b830a5accc9844f99b279a8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/submariner-addon-rhel8@sha256:1fb81f08d24cbd059d9e2c5934d51c5d75b92c1b0e59b1992899bff2cb3df09b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/thanos-receive-controller-rhel8@sha256:5f62ab31cb74dd524a084342c8bd26cdac5c2a732f1cf6cba3e9ea2d76e94784_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/thanos-rhel7@sha256:40b5d34480d65b914a6354c7b91535776afb6fcceb4a25caac2559938d4f01ef_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/work-rhel8@sha256:34f4782066c344172ebe8af2ef196c5c6486705c34513d765b34f5eb5ae8f0e9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729
Fixedrhacm2/work-rhel8@sha256:fcb94b3721fde1a8b6e001811c26404fbd4ffc7428c64c7644f0df6816210504_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing
https://access.redhat.com/errata/RHEA-2021:0729

cvss

Technical severity, 0–10. One row per scoring source.

4.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.2–4

v2.04mediumAV:N/AC:L/Au:S/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 8 · impact 2.9

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:Nprimary · NVD / NIST USexploitability 1.2 · impact 1.4

v3.12.2lowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:Nsecondary · ENISA EU

v3.12.2lowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:Nsecondary · security-advisories@github.comexploitability 0.7 · impact 1.4

v3.12.2lowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:Nsecondary · OSV

v3.12.5lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:Nsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-694USCWE-694USCWE-74USCWE-74US

affected products (86)

Products and version ranges known to be affected.

helm helm2.0.0, → 2.16.11enisa_euvdEU
helm helm3.0.0, → 3.3.2enisa_euvdEU
helm helm2.0.0 → 2.16.11nvdUScpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*
helm helm3.0.0 → 3.3.2nvdUScpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*
Bitnami helm2.0.0 → 2.16.11osvUSpkg:bitnami/helm
Bitnami helm3.0.0 → 3.3.2osvUSpkg:bitnami/helm
Go helm.sh/helm< 2.16.11osvUSpkg:golang/helm.sh/helm
Go helm.sh/helm/v33.0.0 → 3.3.2osvUSpkg:golang/helm.sh/helm/v3
rhacm2/acm-must-gather-rhel8@sha256:5c1f5bf227a404698ad8f945d7b200f3777a392eee3e6a9c06fba7622e0ee15b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/acm-operator-bundle@sha256:96e323e923dfb556daadc87e990eb89277c21926e56e378bae60bf1d2a46931a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/acmesolver-rhel8@sha256:2b1b2de643bc640f6584b99c40fa414f0682c700af26ac81edd280474e0becf3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/application-ui-rhel8@sha256:2dcfc24dbc56c7fe2e5660533a03e5c3d18083c77544debe9fb10855e4c0e683_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/cainjector-rhel8@sha256:122ac673eb558e39d81e4c8f37f417a2804a992e238bd124e3ad449667f004f9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/cert-manager-controller-rhel8@sha256:99b5a408910f72442751509844d1b73e009d9c9d31fc4d71a65c5ff65bc047a8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/cert-manager-webhook-rhel8@sha256:6403fc5956fe0a17dd06a6bb2dc425b1134b9fad8ef408038fbb266541ea473b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/cert-policy-controller-rhel8@sha256:35908f061ba959c58ce42ed662f5170f3cdaf9b9ddbb8a80882d9a9bc986357f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/cert-policy-controller-rhel8@sha256:8af54d71b2bb7ef16cdedcaa612e35c3b8868466864de4320ba63fbf3b210a14_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/clusterlifecycle-state-metrics-rhel8@sha256:39ce3f885d935143e707334164730c410216986ad77bc7f47f0d80c197c33154_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/config-policy-controller-rhel8@sha256:7bb0788df3373dc6ec6ce1a94d5a10c6fa98d84c3976cdb821d23cc192648f76_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS
rhacm2/config-policy-controller-rhel8@sha256:d11c8eae90b907afc899d8df71054c45f566c8a20989a8308984b35cb13dab2d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8all versionsfixedredhat_csafUS

showing 20 of 86

advisories (3)

Vendor and ecosystem advisories describing this.

RHEA-2021:0729Red Hat Enhancement Advisory: Red Hat Advanced Cluster Management for Kubernetes version 2.2 images2021-03-04csaf · redhat_csafUS
Red Hat Advanced Cluster Management for Kubernetes 2.2.0 General Availability release
GHSA-jm56-5h66-w453Repository index file allows for duplicates of the same chart entry in helm2021-05-24ghsa · osvUS
### Impact During a security audit of Helm's code base, security researchers at Trail of Bits identified a bug in which the a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker must have write access to the index file (which can occur during a MITM attack on a non-SSL connection). ### Specific Go Packages Affected helm.sh/helm/v3/pkg/repo ### Patches This issue has been patched in Helm 3.3.2 and 2.16.11 ### Workarounds - do not install charts from repositories you do not trust - fetch charts using a secure channel of communication (such as TLS) - use `helm pull` to fetch the chart, then review the chart’s content (either manually, or with `helm verify` if it has been signed) to ensure it has not been tampered with - manually review the index file in the Helm repository cache before installing software.
BIT-helm-2020-15185Duplicated chart entries in Helm2024-03-06vendor · osvUS
In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker must have write access to the index file (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review the index file in the Helm repository cache before installing software.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv nvd redhat_csaf NVD CVE.org MITRE

published 2020-09-17modified 2026-06-17

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan