Red Hat Security AdvisoryRHSA-2020:4605
resource-agents security and bug fix update
Released 2020-11-04 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux High Availability (v. 8) resource-agents-4.1.1-68.el8, resource-agents-aliyun-4.1.1-68.el8, resource-agents-gcp-4.1.1-68.el8
- Red Hat Enterprise Linux Resilient Storage (v. 8) resource-agents-4.1.1-68.el8, resource-agents-aliyun-4.1.1-68.el8, resource-agents-gcp-4.1.1-68.el8
Fixes 1 record
Priority LOW 35
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.02427 · Published 2020-05-20 · Partial fix · 0.81.0, 0.18.0 CWE-93
