Openshift Container Platform Ibm Z Systems (Redhat) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-09-03. Vendor: Redhat.

CVEs of Openshift Container Platform Ibm Z Systems

• CVE-2024-4629 - CVSS 6.5 (medium), 2024-09-03: A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating…
• CVE-2023-6134 - CVSS 5.4 (medium), 2023-12-14: A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an…
• CVE-2023-5625 - CVSS 7.5 (high), 2023-11-01: A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419…
• CVE-2022-4318 - CVSS 7.8 (high), 2023-09-25: A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
• CVE-2022-3916 - CVSS 6.8 (medium), 2023-09-20: A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due…
• CVE-2023-0264 - CVSS 5 (medium), 2023-08-04: A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain…
• CVE-2023-3089 - CVSS 7.5 (high), 2023-07-05: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic…
• CVE-2023-0056 - CVSS 6.5 (medium), 2023-03-23: An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote…