Red Hat Security Advisory

RHSA-2021:5110

Cryostat security update

Released 2021-12-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Cryostat 2 on RHEL 8 cryostat-20-tech-preview/cryostat-operator-bundle, cryostat-20-tech-preview/cryostat-rhel8-operator

Fixes 1 record

TI-2020-15993 CVE-2020-26160 · GHSA-w73w-5m7g-f7qc

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in…

LOW 37

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02158 Published 2020-09-30 Partial fix · 4.0.0-preview1 CWE-287