Red Hat Security Advisory

RHSA-2022:5030

Red Hat Fuse Online 7.10.2.P1 security update

Released 2022-06-14 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2022-01520 CVE-2022-1650 · GHSA-6h5x-7c5m-7cr7

MEDIUM 44

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01861 Published 2022-05-12 Partial fix · v2.0.2, v1.1.1 +2 CWE-212

TI-2021-05527 CVE-2021-22573 · GHSA-hw42-3568-wj87

LOW 39

The vulnerability is that IDToken verifier does not verify if token is properly signed.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.003 Published 2022-05-03 Partial fix · 1.33.2, 1.33.3 CWE-347