Red Hat Vulnérabilités

Chronologie

Taper

Produit

Red Hat Enterprise Linux111
Red Hat Linux80
Red Hat JBoss Enterprise Application Platform62
Red Hat Ansible36
Red Hat Ansible Tower29

Contre-mesures

Official Fix622
Temporary Fix0
Workaround5
Unavailable1
Not Defined318

Exploitabilité

High18
Functional0
Proof-of-Concept79
Unproven36
Not Defined813

Vecteur d'accès

Not Defined0
Physical1
Local270
Adjacent108
Network567

Authentification

Not Defined0
High12
Low318
None616

Interaction de l'utilisateur

Not Defined0
Required122
None824

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤4127
≤5133
≤6234
≤7183
≤8139
≤977
≤1049

CVSSv3 Temp

≤10
≤20
≤36
≤4137
≤5149
≤6262
≤7179
≤8121
≤965
≤1027

VulDB

≤10
≤21
≤313
≤4166
≤5129
≤6245
≤7139
≤8142
≤963
≤1048

NVD

≤10
≤20
≤33
≤49
≤512
≤665
≤763
≤875
≤943
≤1032

CNA

≤10
≤20
≤31
≤45
≤53
≤65
≤710
≤88
≤94
≤102

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k2
<2k2
<5k118
<10k329
<25k435
<50k60
<100k0
≥100k0

Exploiter aujourd'hui

<1k634
<2k38
<5k111
<10k123
<25k40
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (212): 3scale (1), 3scale API Management (1), 3scale API Management Platform (4), 389 Directory Server (3), 389-ds-base (1), A-MQ Streams (1), AMQ (2), AMQ Broker (3), Advanced Cluster Management for Kubernetes (4), Advanced Cluster Security for Kubernetes (1), Aeolus Conductor (1), Ansible (36), Ansible Automation Platform (3), Ansible Base (1), Ansible Community (1), Ansible Engine (16), Ansible Playbooks (1), Ansible Tower (29), Ansible Vault (1), Application Platforms (1), Automatic Bug Reporting Tool (3), Business Central (1), CMAN (1), Cairo (1), Ceph (1), Ceph Storage (5), Ceph Storage RGW (1), Ceph Storage RadosGW (2), Certificate Server (2), Certificate System (8), Certification (1), CloudForms (19), CloudForms 2 Management Engine (1), CloudForms 3.0 Management Engine (8), CloudForms 3.1 Management Engine (2), CloudForms Cloud Engine (2), CloudForms Management Engine (5), Cloudforms (1), Cloudforms 3.0 Management Engine (4), Cluster Suite (2), Conga (3), Cygwin (1), DataGrid (1), Decision Manager (2), Desktop (1), Directory Server (12), Discovery Server (1), DocBook Stylesheets (1), Docker (1), Dogtag Certificate System (3), Enterprise Application Platform (2), Enterprise Linux (111), Enterprise Linux Desktop (9), Enterprise Linux HPC Node (5), Enterprise Linux Kernel (1), Enterprise Linux OpenStack (1), Enterprise Linux OpenStack Platform (1), Enterprise Linux Server (5), Enterprise Linux Server Aus (1), Enterprise Linux Server Supplementary (1), Enterprise Linux Workstation (6), Enterprise MRG (13), Enterprise Mrg (4), Enterprise Virtualization (18), Enterprise Virtualization Hypervisor (2), Enterprise Virtualization Manager (19), Evince (4), Fedora (6), Fedora Core (6), Fedora Directory Server (1), Feedhenry Enterprise Mobile Application Platform (1), FreeIPA (6), Glint (1), GlusterFS (7), Gluster Storage (6), Gluster Storage Server (1), IcedTea (3), IcedTea-Web (5), IcedTea6 (2), Infinispan (1), InterChange (1), JBoss (15), JBoss A-MQ (6), JBoss Application Server (4), JBoss BPMS (4), JBoss BPM Suite (8), JBoss BRMS (4), JBoss Core Services httpd (2), JBoss Data Grid (2), JBoss Data Virtualization (3), JBoss EAP (11), JBoss Enterprise (10), JBoss Enterprise Application Platform (62), JBoss Enterprise BRMS Platform (3), JBoss Enterprise Portal Platform (11), JBoss Enterprise SOA Platform (2), JBoss Fuse (4), JBoss Operations Network (13), JBoss Portal (5), JBoss Remoting (2), JBossWeb (1), JBoss Web Framework Kit (4), JBoss Web Server (1), JBoss WildFly Application Server (1), Jboss (1), Jboss Enterprise Soa Platform (1), Jboss Enterprise Web (1), Jboss Fuse Esb Enterprise (1), Jbpm-designer (1), KIE Server (1), KON (2), Kernel (1), KeyCloak (4), Kie Workbench (1), Linux (83), Linux Advanced Workstation (1), Linux Enterprise (1), Luci (1), ManageIQ EVM (1), ManageIQ Enterprise Virtualization Manager (1), Mobile Application Platform (1), NetworkManager (1), Network Satelite Server (1), Network Satellite (11), Network Satellite Server (6), Nfs Utils (1), OpenShift (14), OpenShift API Management (1), OpenShift Assisted Installer (1), OpenShift Container Platform (1), OpenShift Container Platform 3 (1), OpenShift Enterprise (14), OpenShift Origin (5), OpenStack (12), OpenStack Platform (2), OpenStack Platform Director (2), Openshift (2), Openshift Container Storage (1), Openshift node-utils (1), Openstack (4), Openstack Enterprise (1), Openstack Folsom (2), PXE Server (1), PackStack (1), PolicyKit (1), Process Automation (2), Process Automation Manager (1), Quay (5), QuickStart Cloud Installer (4), RESTEasy (3), RHN (1), RPM (1), RPM Package Manager (8), Red Hat Certificate System (2), Remoting for SOA Platform (1), RichFaces (1), SDL (1), Satellite (24), Single Sign-On (3), Single Sign On (1), Spacewalk (9), Storage Console (1), Storage Server (2), Stronghold (2), Subscription Asset Manager (2), TUX HTTP Server (1), Uberfire (1), Update Infrastructure (1), Virtual Desktop Service Manager (1), WildFly (9), Wildfly Elytron (1), XML Language Server (1), XML Language Support (1), adminutil (1), cman (1), containers-image (1), dtach (1), enterprise linux (1), gfs2-utils (1), hawtjni (1), jboss-client (1), jboss-remoting (1), katello-headpin (1), kdelibs (1), kexec-tools (3), libvirt (17), livecd-tools (1), mcstrans (1), open-iscsi (1), openshift (5), openshift-clients (1), openstack (1), openstack-neutron (1), openstack-octavia (1), policycoreutils (2), ppp (1), redhat-certification (5), redhat-sso-7 (1), rhevm-dwh (1), rhevm-reports (3), rhncfg (1), rpcbind (1), sos (2), spacewalk-java (2), spice-activex (1), spice-gtk (1), spice-xpi (4), sysreport (1), system-config-firewall (1), system-config-printer (1), up2date (1), yum-rhn-plugin (1)

Link to Vendor Website: https://www.redhat.com/

PubliéBaseTempVulnérabilitéProdExpConCTIEPSSCVE
01/06/20235.55.5Red Hat Advanced Cluster Management for Kubernetes grc-policy-propagator elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.030.00043CVE-2023-3027
18/05/20233.53.4Red Hat A-MQ Streams OKHttp divulgation de l'informationInconnueNot DefinedOfficial Fix0.040.00000CVE-2023-0833
25/03/20234.54.4Red Hat OpenShift Assisted Installer Discovery ISO Generation divulgation de l'informationVirtualization SoftwareNot DefinedOfficial Fix0.030.00045CVE-2021-3684
28/02/20234.94.9Red Hat Discovery Server LDAP divulgation de l'informationInconnueNot DefinedNot Defined0.000.00043CVE-2023-1055
18/01/20233.93.9Red Hat OpenShift Block Cipher chiffrement faibleVirtualization SoftwareNot DefinedOfficial Fix0.060.00046CVE-2023-0296
13/01/20237.07.0Red Hat Advanced Cluster Management for Kubernetes API Endpoint elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.030.00044CVE-2022-3841
16/12/20226.26.2Red Hat Satellite HTTP Header elévation de privilègesInconnueNot DefinedNot Defined0.030.00046CVE-2022-4130
07/12/20223.53.4Red Hat OpenStack Dashboard cross site scriptingCloud SoftwareNot DefinedNot Defined0.040.00043CVE-2022-4133
20/10/20224.54.5Red Hat OpenShift server_priv.pem elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.030.00042CVE-2013-4281
20/10/20226.16.1Red Hat 3scale API Management divulgation de l'informationAutomation SoftwareNot DefinedNot Defined0.030.00048CVE-2022-1414
20/10/20226.96.9Red Hat OpenShift Add-on Script elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.000.00048CVE-2013-4253
18/10/20227.17.1Red Hat Decision Manager/Process Automation Business Central Console elévation de privilègesAutomation SoftwareNot DefinedNot Defined0.040.00050CVE-2019-14841
18/10/20225.55.5Red Hat Decision Manager/Process Automation divulgation de l'informationAutomation SoftwareNot DefinedNot Defined0.010.00084CVE-2019-14840
18/10/20224.54.5Red Hat OpenShift Enterprise Hawkular Metric elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.030.00045CVE-2017-7517
15/10/20225.05.0Red Hat 389-ds-base Content Synchronization Plugin dénie de serviceInconnueNot DefinedNot Defined0.070.00047CVE-2022-2850
13/09/20225.55.5Red Hat WildFly elévation de privilègesApplication Server SoftwareNot DefinedNot Defined0.040.00087CVE-2022-1278
02/09/20224.94.9Red Hat OpenShift Container Platform HAProxy Configuration File dénie de serviceVirtualization SoftwareNot DefinedNot Defined0.020.00044CVE-2022-1677
02/09/20226.06.0Red Hat Openshift authentification faibleVirtualization SoftwareNot DefinedNot Defined0.030.00049CVE-2022-1632
02/09/20226.06.0Red Hat Advanced Cluster Management for Kubernetes Search Filter Parser sql injectionVirtualization SoftwareNot DefinedNot Defined0.000.00044CVE-2022-2238
02/09/20226.16.1Red Hat Advanced Cluster Security for Kubernetes Notifier Secret divulgation de l'informationVirtualization SoftwareNot DefinedOfficial Fix0.030.00064CVE-2022-1902
01/09/20226.06.0Red Hat OpenShift Subdomain elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.000.00000CVE-2022-2220
26/08/20226.86.8Red Hat Satellite elévation de privilègesInconnueNot DefinedNot Defined0.030.00050CVE-2021-3414
26/08/20223.53.5Red Hat JBoss Core Services httpd directory traversalApplication Server SoftwareNot DefinedNot Defined0.020.00047CVE-2021-3688
26/08/20225.55.5Red Hat Ansible Tower Job Isolation elévation de privilègesInconnueNot DefinedNot Defined0.030.00043CVE-2021-4112
26/08/20224.54.5Red Hat Ceph Storage chiffrement faibleInconnueNot DefinedOfficial Fix0.030.00060CVE-2021-3979

921 plus d'entrées ne sont pas affichées

Want to stay up to date on a daily basis?

Enable the mail alert feature now!