Red Hat Security Advisory

RHSA-2022:9108

OpenShift Container Platform 4.11.21 extras and security update

Released 2023-01-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.11 openshift4/ose-grafana

Fixes 1 record

TI-2022-20253 CVE-2022-41912 · GHSA-j2jp-wvqg-wc2g

crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements

MEDIUM 53

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02337 Published 2022-11-28 Partial fix · 0.4.9 CWE-287