Red Hat Security Advisory

RHSA-2024:0325

Updated RHEL-7-based Middleware container images

Released 2024-01-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Middleware RHEL 7 Containers for OpenShift openjdk/openjdk-11-rhel7, redhat-openjdk-18/openjdk18-openshift

TI-2022-01345 CVE-2022-1471 · GHSA-mjmj-j48q-9wg2

CRITICAL 88

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99501 Published 2022-12-01 Partial fix · 2.0 CWE-20