CVEvulnerability

CVE-2022-4039

9.8 CRITICAL Published 2023-09-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-276

Description

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Affected configurations

• redhat single sign-on 7.0 • redhat openshift container platform 4.9 • redhat openshift container platform 4.10 • redhat openshift container platform for ibm z 4.9 • redhat openshift container platform for ibm z 4.10 • redhat openshift container platform for linuxone 4.9 • redhat openshift container platform for linuxone 4.10 • redhat openshift container platform for power 4.9 • redhat openshift container platform for power 4.10

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References