Red Hat Security AdvisoryRHSA-2024:10852
RHOAI 2.16.0 - Red Hat OpenShift AI
Released 2024-12-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8 +4
Fixes 4 records
Priority MEDIUM 57
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix colli…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.14859 · Published 2024-07-09 · Partial fix CWE-354
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01262 · Published 2024-03-05 · Partial fix · 1.33.0 CWE-835
Priority LOW 39
Werkzeug is a Web Server Gateway Interface web application library.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01095 · Published 2024-10-25 · Partial fix · 3.0.6, 0.20.0 CWE-400
Priority LOW 36
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00781 · Published 2024-11-07 · Partial fix · 1.7.0, 1.3.1-36.el8_10 +168 CWE-287
