Red Hat Security Advisory

RHSA-2022:6424

Multicluster Engine for Kubernetes 2.1.1 security update and bug fixes

Released 2022-09-12 · Red Hat rating Critical · View on Red Hat →

Fixed in

multicluster engine for Kubernetes 2.1 for RHEL 8 multicluster-engine/agent-service-rhel8, multicluster-engine/apiserver-network-proxy-rhel8, multicluster-engine/assisted-image-service-rhel8 +37

TI-2022-16490 CVE-2022-36067 · GHSA-mrgp-mrhc-5jrq

HIGH 82

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.47868 Published 2022-09-06 Partial fix · 3.9.11 CWE-913