Red Hat 脆弱性

タイムライン

タイプ

製品

Red Hat Enterprise Linux111
Red Hat Linux80
Red Hat JBoss Enterprise Application Platform62
Red Hat Ansible36
Red Hat Ansible Tower29

修復

Official Fix622
Temporary Fix0
Workaround5
Unavailable1
Not Defined324

悪用可能性

High18
Functional0
Proof-of-Concept79
Unproven36
Not Defined819

アクセスベクター

Not Defined0
Physical1
Local271
Adjacent111
Network569

認証

Not Defined0
High12
Low324
None616

ユーザー操作

Not Defined0
Required124
None828

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤4130
≤5133
≤6236
≤7182
≤8141
≤976
≤1050

CVSSv3 Temp

≤10
≤20
≤36
≤4140
≤5149
≤6264
≤7179
≤8123
≤964
≤1027

VulDB

≤10
≤21
≤314
≤4169
≤5129
≤6246
≤7139
≤8143
≤963
≤1048

NVD

≤10
≤20
≤33
≤49
≤512
≤665
≤763
≤877
≤943
≤1032

CNA

≤10
≤20
≤31
≤47
≤54
≤65
≤711
≤810
≤94
≤103

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k2
<2k1
<5k119
<10k334
<25k436
<50k60
<100k0
≥100k0

本日のエクスプロイト

<1k640
<2k39
<5k108
<10k127
<25k38
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (214): 3scale (1), 3scale API Management (1), 3scale API Management Platform (4), 389 Directory Server (3), 389-ds-base (1), A-MQ Streams (1), AMQ (2), AMQ Broker (3), Advanced Cluster Management for Kubernetes (4), Advanced Cluster Security for Kubernetes (1), Aeolus Conductor (1), Ansible (36), Ansible Automation Platform (4), Ansible Base (1), Ansible Community (1), Ansible Engine (16), Ansible Playbooks (1), Ansible Tower (29), Ansible Vault (1), Application Platforms (1), Automatic Bug Reporting Tool (3), Business Central (1), CMAN (1), Cairo (1), Ceph (1), Ceph Storage (5), Ceph Storage RGW (1), Ceph Storage RadosGW (2), Certificate Server (2), Certificate System (8), Certification (1), CloudForms (19), CloudForms 2 Management Engine (1), CloudForms 3.0 Management Engine (8), CloudForms 3.1 Management Engine (2), CloudForms Cloud Engine (2), CloudForms Management Engine (5), Cloudforms (1), Cloudforms 3.0 Management Engine (4), Cluster Suite (2), Conga (3), Cygwin (1), DataGrid (1), Decision Manager (2), Desktop (1), Directory Server (12), Discovery Server (1), DocBook Stylesheets (1), Docker (1), Dogtag Certificate System (3), Enterprise Application Platform (2), Enterprise Linux (111), Enterprise Linux Desktop (9), Enterprise Linux HPC Node (5), Enterprise Linux Kernel (1), Enterprise Linux OpenStack (1), Enterprise Linux OpenStack Platform (1), Enterprise Linux Server (5), Enterprise Linux Server Aus (1), Enterprise Linux Server Supplementary (1), Enterprise Linux Workstation (6), Enterprise MRG (13), Enterprise Mrg (4), Enterprise Virtualization (18), Enterprise Virtualization Hypervisor (2), Enterprise Virtualization Manager (19), Evince (4), Fedora (6), Fedora Core (6), Fedora Directory Server (1), Feedhenry Enterprise Mobile Application Platform (1), FreeIPA (6), Glint (1), GlusterFS (7), Gluster Storage (6), Gluster Storage Server (1), IcedTea (3), IcedTea-Web (5), IcedTea6 (2), Infinispan (1), InterChange (1), JBoss (15), JBoss A-MQ (6), JBoss Application Server (4), JBoss BPMS (4), JBoss BPM Suite (8), JBoss BRMS (4), JBoss Core Services httpd (2), JBoss Data Grid (2), JBoss Data Virtualization (3), JBoss EAP (11), JBoss Enterprise (10), JBoss Enterprise Application Platform (62), JBoss Enterprise BRMS Platform (3), JBoss Enterprise Portal Platform (11), JBoss Enterprise SOA Platform (2), JBoss Fuse (4), JBoss Operations Network (13), JBoss Portal (5), JBoss Remoting (2), JBossWeb (1), JBoss Web Framework Kit (4), JBoss Web Server (1), JBoss WildFly Application Server (1), Jboss (1), Jboss Enterprise Soa Platform (1), Jboss Enterprise Web (1), Jboss Fuse Esb Enterprise (1), Jbpm-designer (1), KIE Server (1), KON (2), Kernel (1), KeyCloak (4), Kie Workbench (1), Linux (83), Linux Advanced Workstation (1), Linux Enterprise (1), Luci (1), ManageIQ EVM (1), ManageIQ Enterprise Virtualization Manager (1), Mobile Application Platform (1), NetworkManager (1), Network Satelite Server (1), Network Satellite (11), Network Satellite Server (6), Nfs Utils (1), OpenShift (15), OpenShift API Management (1), OpenShift Assisted Installer (1), OpenShift Container Platform (1), OpenShift Container Platform 3 (1), OpenShift Data Science (1), OpenShift Enterprise (14), OpenShift Origin (5), OpenStack (13), OpenStack Platform (2), OpenStack Platform Director (2), Openshift (2), Openshift Container Storage (1), Openshift node-utils (1), Openstack (4), Openstack Enterprise (1), Openstack Folsom (2), PXE Server (1), PackStack (1), PolicyKit (1), Process Automation (2), Process Automation Manager (1), Quay (6), QuickStart Cloud Installer (4), RESTEasy (3), RHN (1), RPM (1), RPM Package Manager (8), Red Hat Certificate System (2), Remoting for SOA Platform (1), RichFaces (1), SDL (1), Satellite (24), Single Sign-On (3), Single Sign On (1), Spacewalk (9), Storage Console (1), Storage Server (2), Stronghold (2), Subscription Asset Manager (2), TUX HTTP Server (1), Uberfire (1), Update Infrastructure (1), Virtual Desktop Service Manager (1), WildFly (9), Wildfly Elytron (1), XML Language Server (1), XML Language Support (1), adminutil (1), cman (1), containers-image (1), dtach (1), enterprise linux (1), gfs2-utils (1), hawtjni (1), insights-client (1), jboss-client (1), jboss-remoting (1), katello-headpin (1), kdelibs (1), kexec-tools (3), libvirt (17), livecd-tools (1), mcstrans (1), open-iscsi (1), openshift (5), openshift-clients (1), openstack (1), openstack-neutron (1), openstack-octavia (1), policycoreutils (2), ppp (1), redhat-certification (5), redhat-sso-7 (1), rhevm-dwh (1), rhevm-reports (3), rhncfg (1), rpcbind (1), sos (2), spacewalk-java (2), spice-activex (1), spice-gtk (1), spice-xpi (4), sysreport (1), system-config-firewall (1), system-config-printer (1), up2date (1), yum-rhn-plugin (1)

Link to Vendor Website: https://www.redhat.com/

公開済みBaseTemp脆弱性Prod修復CTIEPSSCVE
2023年07月27日7.87.8Red Hat OpenStack 特権昇格Cloud SoftwareNot DefinedNot Defined0.060.00000CVE-2023-3976
2023年07月27日5.55.5Red Hat insights-client 特権昇格未知Not DefinedNot Defined0.060.00000CVE-2023-3972
2023年07月27日3.53.5Red Hat Ansible Automation Platform Controller/Hub クロスサイトスクリプティングAutomation SoftwareNot DefinedNot Defined0.000.00000CVE-2023-3971
2023年07月05日5.75.7Red Hat OpenShift OCP/FIPS 弱い暗号化Virtualization SoftwareNot DefinedNot Defined0.000.00087CVE-2023-3089
2023年06月23日3.53.5Red Hat Quay Image クロスサイトスクリプティング未知Not DefinedNot Defined0.050.00045CVE-2023-3384
2023年06月22日3.53.5Red Hat OpenShift Data Science Notebook Pipeline Editor 情報の漏洩Virtualization SoftwareNot DefinedNot Defined0.000.00000CVE-2023-3361
2023年06月01日6.66.6Red Hat Advanced Cluster Management for Kubernetes grc-policy-propagator 特権昇格Virtualization SoftwareNot DefinedNot Defined0.000.00043CVE-2023-3027
2023年05月18日3.53.4Red Hat A-MQ Streams OKHttp 情報の漏洩未知Not DefinedOfficial Fix0.030.00000CVE-2023-0833
2023年03月25日4.54.4Red Hat OpenShift Assisted Installer Discovery ISO Generation 情報の漏洩Virtualization SoftwareNot DefinedOfficial Fix0.040.00045CVE-2021-3684
2023年02月28日4.94.9Red Hat Discovery Server LDAP 情報の漏洩未知Not DefinedNot Defined0.000.00043CVE-2023-1055
2023年01月18日3.93.9Red Hat OpenShift Block Cipher 弱い暗号化Virtualization SoftwareNot DefinedOfficial Fix0.040.00046CVE-2023-0296
2023年01月13日7.07.0Red Hat Advanced Cluster Management for Kubernetes API Endpoint 特権昇格Virtualization SoftwareNot DefinedNot Defined0.000.00044CVE-2022-3841
2022年12月16日6.26.2Red Hat Satellite HTTP Header 特権昇格未知Not DefinedNot Defined0.040.00046CVE-2022-4130
2022年12月07日3.53.4Red Hat OpenStack Dashboard クロスサイトスクリプティングCloud SoftwareNot DefinedNot Defined0.040.00043CVE-2022-4133
2022年10月20日4.54.5Red Hat OpenShift server_priv.pem 特権昇格Virtualization SoftwareNot DefinedNot Defined0.030.00042CVE-2013-4281
2022年10月20日6.16.1Red Hat 3scale API Management 情報の漏洩Automation SoftwareNot DefinedNot Defined0.040.00048CVE-2022-1414
2022年10月20日6.96.9Red Hat OpenShift Add-on Script 特権昇格Virtualization SoftwareNot DefinedNot Defined0.000.00048CVE-2013-4253
2022年10月18日7.17.1Red Hat Decision Manager/Process Automation Business Central Console 特権昇格Automation SoftwareNot DefinedNot Defined0.040.00050CVE-2019-14841
2022年10月18日5.55.5Red Hat Decision Manager/Process Automation 情報の漏洩Automation SoftwareNot DefinedNot Defined0.000.00084CVE-2019-14840
2022年10月18日4.54.5Red Hat OpenShift Enterprise Hawkular Metric 特権昇格Virtualization SoftwareNot DefinedNot Defined0.030.00045CVE-2017-7517
2022年10月15日5.05.0Red Hat 389-ds-base Content Synchronization Plugin サービス拒否未知Not DefinedNot Defined0.040.00047CVE-2022-2850
2022年09月13日5.55.5Red Hat WildFly 特権昇格Application Server SoftwareNot DefinedNot Defined0.050.00087CVE-2022-1278
2022年09月02日4.94.9Red Hat OpenShift Container Platform HAProxy Configuration File サービス拒否Virtualization SoftwareNot DefinedNot Defined0.020.00053CVE-2022-1677
2022年09月02日6.06.0Red Hat Openshift 弱い認証Virtualization SoftwareNot DefinedNot Defined0.030.00052CVE-2022-1632
2022年09月02日6.06.0Red Hat Advanced Cluster Management for Kubernetes Search Filter Parser SQLインジェクションVirtualization SoftwareNot DefinedNot Defined0.000.00053CVE-2022-2238

927 非表示のエントリあり

Do you know our Splunk app?

Download it now for free!