8.0
High
CVE-2022-4039 A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured…
Description
A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RHEL-8 based Middleware Containers 7.6 | earliest → < 7.6-20 | 7.6-20 |
| Red Hat Single Sign-On 7 | Versions not published |
References
- RHSA-2023:1047 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2143416 bugzilla.redhat.com
Timeline
- Published
- Last modified