Red Hat Security Advisory

RHSA-2023:4972

Multicluster Engine for Kubernetes 2.1.8 security updates and bug fixes

Released 2023-09-05 · Red Hat rating Critical · View on Red Hat →

Fixed in

multicluster engine for Kubernetes 2.1 for RHEL 8 multicluster-engine/agent-service-rhel8, multicluster-engine/apiserver-network-proxy-rhel8, multicluster-engine/assisted-image-service-rhel8 +37

TI-2023-19074 CVE-2023-37466 · GHSA-cchq-frgv-rjh5

MEDIUM 55

vm2 is an advanced vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03867 Published 2023-07-13 Partial fix · 3.10.0 CWE-94

TI-2023-19336 CVE-2023-37903 · GHSA-g644-9gfx-q4q4

MEDIUM 50

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04215 Published 2023-07-21 Partial fix CWE-78

TI-2023-02895 CVE-2023-3089 · GHSA-wj5p-x3cr-46w8

LOW 33

A compliance problem was found in the Red Hat OpenShift Container Platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2023-07-05 Partial fix · 4.12.0 CWE-693