CVE-2022-4039

Katalog CVE

CVSS 9.8 · Critical EPSS 0,79%

Kerentanan Incorrect Default Permissions pada redhat single sign-on, redhat openshift container platform +3 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Rincian

Terbit di NVD

22 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2023:1047 advisory vendor
• https://access.redhat.com/security/cve/CVE-2022-4039 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2143416 issue tracking · advisory vendor