Red Hat Security Advisory

RHSA-2022:9058

prometheus-jmx-exporter security update

Released 2022-12-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) prometheus-jmx-exporter-0.12.0-9.el8_7, prometheus-jmx-exporter-openjdk11-0.12.0-9.el8_7, prometheus-jmx-exporter-openjdk17-0.12.0-9.el8_7 +1

TI-2022-01345 CVE-2022-1471 · GHSA-mjmj-j48q-9wg2

CRITICAL 88

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99501 Published 2022-12-01 Partial fix · 2.0 CWE-20