7.5
High
CVE-2023-6596 An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…
Description
An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4.11 4.11 | earliest → < 4.11.0-202401301508.p0.g5ea0428.assembly.stream | 4.11.0-202401301508.p0.g5ea0428.assembly.stream |
| Red Hat OpenShift Container Platform 4.12 4.12 | earliest → < 4.12.0-202401190520.p0.g4b287bd.assembly.stream | 4.12.0-202401190520.p0.g4b287bd.assembly.stream |
| Red Hat OpenShift Container Platform 4 | Versions not published |
References
- RHSA-2024:0485 access.redhat.com
- RHSA-2024:0682 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2253521 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift Container Platform 4.11
The 5 CVEs of Red Hat OpenShift Container Platform 4.11 →
CVE-2024-21626
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
8.6
High
CVE-2023-5408
A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift
7.2
High
CVE-2022-4318
A vulnerability was found in cri-o
7.8
High
CVE-2023-1260
An authentication bypass vulnerability was discovered in kube-apiserver
8.0
High