Red Hat Red Hat OpenShift Container Platform 4.22
33 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-75888 | | Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch | HIGH 7.7 | 0.4 % | ||
| CVE-2026-96577 | corrigé en 1790775357 | Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled | HIGH 7.1 | 0.1 % | ||
| CVE-2026-83589 | | Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-87114 | corrigé en 1790718431 | Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo | HIGH 7.1 | 0.4 % | ||
| CVE-2026-75887 | | Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler | HIGH 7.5 | 0.5 % | ||
| CVE-2026-75886 | | Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding | HIGH 7.2 | 0.3 % | ||
| CVE-2026-94640 | corrigé en 4.22.9.8.202610241758-0 | Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2026-75885 | | Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint | CRITICAL 9.3 | 0.7 % | ||
| CVE-2026-49329 | | Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login … | HIGH 7.5 | 0.7 % | ||
| CVE-2026-50236 | | Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift … | HIGH 7.4 | 0.5 % | ||
| CVE-2026-50237 | | Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthel… | HIGH 7.4 | 0.5 % | ||
| CVE-2026-72693 | corrigé en 4.22.9.8.202608251819-0 | Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login | HIGH 7.8 | 0.1 % | ||
| CVE-2026-15816 | | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() | HIGH 7.5 | 0.5 % | ||
| CVE-2026-16313 | | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | HIGH 7.6 | 0.3 % | ||
| CVE-2026-49332 | | Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams | HIGH 8.5 | 0.5 % | ||
| CVE-2026-16242 | | Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates | CRITICAL 9.4 | 0.9 % | ||
| CVE-2026-15809 | | Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env | HIGH 7.8 | 0.2 % | ||
| CVE-2026-14476 | | Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass | HIGH 8.0 | 0.7 % | ||
| CVE-2026-14474 | | Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-58015 | | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | HIGH 7.5 | 0.8 % | ||
| CVE-2026-58014 | | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH 8.6 | 0.6 % | ||
| CVE-2026-14164 | | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() | HIGH 7.5 | 0.8 % | ||
| CVE-2026-12505 | corrigé en 4.22.9.8.202607220526-0 | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | HIGH 7.8 | 0.2 % | ||
| CVE-2026-46579 | | Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend | HIGH 7.5 | 0.4 % | ||
| CVE-2026-42965 | | Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation | HIGH 7.7 | 0.4 % | ||
| CVE-2026-1933 | | Samba: missing access check on reparse point operations | HIGH 7.1 | 0.9 % | ||
| CVE-2026-42013 | | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH 8.2 | 0.4 % | ||
| CVE-2026-42012 | | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-5260 | | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH 8.2 | 0.8 % | ||
| CVE-2026-42009 | | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-42011 | | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH 7.4 | 0.5 % | ||
| CVE-2026-42010 | | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL 9.8 | 1.1 % |