Known vulnerabilities in Red Hat OpenShift Container Platform 4.12

Is your version affected?

CVE	Summary	Score	Published
CVE-2024-6508	An insufficient entropy vulnerability was found in the Openshift Console	8.0 High	Aug 21, 2024
CVE-2024-5154	Cri-o: malicious container can create symlink on host	8.1 High	Jun 12, 2024
CVE-2024-5037	A flaw was found in OpenShift's Telemeter	7.5 High	Jun 5, 2024
CVE-2024-3154	A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation	7.2 High	Apr 26, 2024
CVE-2024-1139	Cluster-monitoring-operator: credentials leak	7.7 High	Apr 25, 2024
CVE-2023-6596	An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…	7.5 High	Apr 25, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 High	Mar 18, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024
CVE-2023-5408	A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift	7.2 High	Nov 2, 2023
CVE-2022-4318	A vulnerability was found in cri-o	7.8 High	Sep 25, 2023
CVE-2023-1260	An authentication bypass vulnerability was discovered in kube-apiserver	8.0 High	Sep 24, 2023
CVE-2022-3466	The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via…	4.8 Medium	Sep 15, 2023