Red Hat Security Advisory

RHSA-2022:6954

Red Hat Advanced Cluster Management 2.5.3 security fixes and bug fixes

Released 2022-10-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 rhacm2/acm-cluster-proxy-rhel8, rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8 +47

Fixes 1 record

TI-2022-02066 CVE-2022-2238 · GHSA-gpp7-gqhm-5827

SQL injection in Red Hat Advanced Cluster Management for Kubernetes

LOW 31

A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00937 Published 2022-09-01 Partial fix CWE-89