Red Hat Security AdvisoryRHSA-2024:8974
Red Hat Advanced Cluster Management 2.12.0 security and bug fixes
Released 2024-11-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/acm-cli-rhel9, rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9 +43
Fixes 4 records
Priority HIGH 72
goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00979 · Published 2023-07-18 · Partial fix · 0.0.0-20230731152917-f99041a5c027 CWE-400
Priority MEDIUM 40
The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00496 · Published 2024-10-10 · Partial fix · 6.5.6 CWE-347
Priority LOW 39
A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00802 · Published 2024-03-07 · Partial fix · 9.5.7, 10.0.12 +3 CWE-269
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
THREATIST.IORead the docs