CVE-2021-4125

Katalog CVE

CVSS 8.1 · High EPSS 1,5%

Kerentanan Improper Input Validation pada redhat openshift. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.

Rincian

Terbit di NVD

24 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2033121 issue tracking · patch · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2021-4125 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2021-44228 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2021-45046 advisory pihak ketiga
• https://github.com/kube-reporting/hive/pull/71 advisory pihak ketiga
• https://github.com/kube-reporting/hive/pull/72 advisory pihak ketiga
• https://github.com/kube-reporting/hive/pull/73 advisory pihak ketiga