Red Hat Security AdvisoryRHSA-2023:2138
OpenShift Container Platform 4.13.0 CNF vRAN extras security update
Released 2023-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/bare-metal-event-relay-operator-bundle, openshift4/bare-metal-event-relay-rhel8-operator, openshift4/baremetal-hardware-event-proxy-rhel8 +5
Fixes 2 records
Priority MEDIUM 41
HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.02828 · Published 2020-08-26 · Partial fix · 1.2.5, 1.3.8 +2 CWE-287
Priority LOW 31
HashiCorp Vault and Vault Enterprise 0.11.0 up to 1.7.5 and 1.8.4 templated ACL policies would always match the first-created entity alias if multiple entity aliases exist for a specified entity and mount combination, po…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01041 · Published 2021-11-30 · Partial fix · 1.7.6, 1.8.5 CWE-732
