Red Hat Security Advisory

RHSA-2021:1448

Red Hat Advanced Cluster Management 2.0.10 security and bug fix updates

Released 2021-04-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.0 for RHEL 8 rhacm2/acm-operator-bundle

Fixes 1 record

TI-2021-06054 CVE-2021-23358 · GHSA-cf4h-3jhx-xvhq

Arbitrary code injection in underscore

HIGH 67

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.042 Published 2021-03-29 Partial fix · 1.13.0-2, 1.12.1 CWE-94