Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-4039

Опубликовано: 22 сент. 2023
Источник: debian
EPSS Низкий

Описание

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
keycloakitppackage

EPSS

Процентиль: 54%
0.00789
Низкий

Связанные уязвимости

CVSS3: 8
redhat
больше 3 лет назад

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

CVSS3: 8
nvd
почти 3 года назад

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

CVSS3: 8
github
почти 3 года назад

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

CVSS3: 8
fstec
больше 3 лет назад

Уязвимость программного средства для управления идентификацией и доступом Keycloak, связанная с настройками прав доступа по умолчанию, позволяющая нарушителю, действующему удаленно, выполнить произвольный код

EPSS

Процентиль: 54%
0.00789
Низкий