Red Hat Security AdvisoryRHSA-2025:11679
OpenShift Container Platform 4.18.21 security and extras update
Released 2025-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 openshift4/ose-ptp-rhel9, openshift4/ose-ptp-rhel9-operator, openshift4/ose-sriov-dp-admission-controller-rhel9 +1
Fixes 1 record
Priority LOW 33
When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2025-01-28 · Partial fix · 1.2.4 CWE-377
