Red Hat Security Advisory

RHSA-2023:2083

Red Hat Advanced Cluster Management 2.6.5 security updates and bug fixes

Released 2023-05-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8 +45

TI-2022-09440 CVE-2022-25881 · GHSA-rc47-6667-2j5j

HIGH 68

This affects versions of the package http-cache-semantics before 4.1.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01613 Published 2023-01-31 Partial fix · 4.1.1 CWE-1333

TI-2022-03521 CVE-2022-3841 · GHSA-4mp7-jw3w-xgg2

LOW 36

RHACM: unauthenticated SSRF in console API endpoint.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00236 Published 2023-01-11 Partial fix CWE-918