Red Hat Security Advisory

RHSA-2023:0772

OpenShift Container Platform 4.12.4 security update

Released 2023-02-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 microshift-4.12.4-202302151633.p0.gb9fe8ac.assembly.4.12.4.el8, microshift-networking-4.12.4-202302151633.p0.gb9fe8ac.assembly.4.12.4.el8, microshift-release-info-4.12.4-202302151633.p0.gb9fe8ac.assembly.4.12.4.el8 +1

Fixes 1 record

TI-2022-02921 CVE-2022-3162 · GHSA-2394-5535-8j88

Unauthorized read of Custom Resources

LOW 32

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01446 Published 2023-03-01 Partial fix · 1.25.4, 1.24.8 +2 CWE-23