Read the docs
TI-2025-06557 Aliases CVE-2025-7195GHSA-856v-8qm2-9wjv

Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Priority LOW 28CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 18 fixed, 6 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.

Summary

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00243 15th percentileScored 2026-11-07
Fix Partial operator-sdk (operator-framework): 0.15.2github.com/operator-framework/operator-sdk (Go): 0.15.2Red Hat: 21 advisoriesRed Hat: 18 fixed, 6 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
operator-frameworkoperator-sdkbefore 0.15.20.15.2Patch availableCNA
Red HatRHEL-9-CNV-4.17—v4.17.39-2Patch availableCNA
Red HatRHEL-9-CNV-4.18—v4.18.25-3Patch availableCNA
Red HatRHEL-9-CNV-4.20—v4.20.3-3Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.6—v2.6Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.7—v2.7Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765872406Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1766360304Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765669648Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765866268Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765872399Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765872402Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765872398Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.8—1765872400Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red Hatmulticluster engine for Kubernetes 2.9—v2.9Patch availableCNA
Red HatOpenShift Compliance Operator 1—1.8.0Patch availableCNA
Red HatOpenShift Compliance Operator 1—1768172669Patch availableCNA
Red HatOpenShift File Integrity Operator - FIO 1—v1.3Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.11—v2.11Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.11—v2.11Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.11—v2.11Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.11—v2.11Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—v2.12Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—1773285089Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—1773259164Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—1773259182Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—1773358651Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12—1773090513Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13—1767569821Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13—1767829032Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13—1767569821Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13—1767656229Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13—1767829032Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—v2.14Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—v2.14Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—v2.14Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—v2.14Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—v2.14Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—v2.14Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—1769720041Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—1770343757Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—1769721579Patch availableCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14—1770336554Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178221Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178222Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178236Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178273Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178715Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178261Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178354Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178419Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178768Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178319Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178386Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178406Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178615Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178379Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178329Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178423Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764178419Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.14—v4.14-1764215448Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176261Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176342Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176372Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176892Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176485Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176698Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176699Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176675Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764177101Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176690Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764221806Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764222436Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764177174Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764177033Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764176958Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764177101Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764177020Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.15—v4.15-1764177029Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764168955Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169118Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169242Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169544Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169347Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169479Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169526Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169464Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169687Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169457Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169527Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169577Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169730Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169598Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169623Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764169710Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764170019Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.16—v4.16-1764170021Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764167834Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764167795Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764167826Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764167876Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168179Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764167987Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168476Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168475Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168431Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168662Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168475Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168536Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168609Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168731Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168699Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764168859Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764169063Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764169125Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.17—v4.17-1764169222Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854289Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854280Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854280Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854319Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761855549Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854321Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854422Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854430Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854457Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854484Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854398Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854494Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854493Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854504Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854489Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761855467Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761854524Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1762335558Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.18—v4.18-1761855234Patch availableCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Engine for Kubernetes——Not affectedCNA
Red HatMulticluster Engine for Kubernetes——Not affectedCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Engine for Kubernetes——Not affectedCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Engine for Kubernetes——No fix listedCNA
Red HatMulticluster Global Hub——Not affectedCNA
Red HatMulticluster Global Hub——Not affectedCNA
Red HatMulticluster Global Hub——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——No fix listedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Management for Kubernetes 2——Not affectedCNA
Red HatRed Hat Advanced Cluster Security 4——Not affectedCNA
Red HatRed Hat build of Apicurio Registry 2——No fix listedCNA
Red HatRed Hat build of Apicurio Registry 3——Not affectedCNA
Red HatRed Hat Fuse 7——No fix listedCNA
Red HatRed Hat OpenShift Container Platform 4——No fix listedCNA
Red HatRed Hat OpenShift Container Platform 4——No fix listedCNA
Red HatRed Hat OpenShift Container Platform 4——No fix listedCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 4——No fix listedCNA
Red HatRed Hat OpenShift Virtualization 4——No fix listedCNA
Red HatRed Hat OpenShift Virtualization 4——Not affectedCNA
Red HatRed Hat OpenShift Virtualization 4——Not affectedCNA
Red HatRed Hat OpenShift Virtualization 4——Not affectedCNA
Red HatRed Hat OpenShift Virtualization 4——Not affectedCNA
Red HatRed Hat OpenShift Virtualization 4——Not affectedCNA
Red HatRed Hat OpenShift Virtualization 4——Not affectedCNA
Red HatRed Hat Web Terminal——Not affectedCNA
Red HatRed Hat Web Terminal——Not affectedCNA
—github.com/operator-framework/operator-sdk (Go)before 0.15.20.15.2Patch availableGHSA-856v-8qm2-9wjv
  • operator-sdk Vendoroperator-framework Affected before 0.15.2 Fixed in 0.15.2 Patch available CNA
  • RHEL-9-CNV-4.17 VendorRed Hat Affected — Fixed in v4.17.39-2 Patch available CNA
  • RHEL-9-CNV-4.18 VendorRed Hat Affected — Fixed in v4.18.25-3 Patch available CNA
  • RHEL-9-CNV-4.20 VendorRed Hat Affected — Fixed in v4.20.3-3 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872406 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1766360304 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765669648 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765866268 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872399 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872402 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872398 Patch available CNA
  • multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872400 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
  • OpenShift Compliance Operator 1 VendorRed Hat Affected — Fixed in 1.8.0 Patch available CNA
  • OpenShift Compliance Operator 1 VendorRed Hat Affected — Fixed in 1768172669 Patch available CNA
  • OpenShift File Integrity Operator - FIO 1 VendorRed Hat Affected — Fixed in v1.3 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773285089 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773259164 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773259182 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773358651 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773090513 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767569821 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767829032 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767569821 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767656229 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767829032 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1769720041 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1770343757 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1769721579 Patch available CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1770336554 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178221 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178222 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178236 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178273 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178715 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178261 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178354 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178419 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178768 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178319 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178386 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178406 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178615 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178379 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178329 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178423 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178419 Patch available CNA
  • Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764215448 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176261 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176342 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176372 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176892 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176485 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176698 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176699 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176675 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177101 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176690 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764221806 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764222436 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177174 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177033 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176958 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177101 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177020 Patch available CNA
  • Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177029 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764168955 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169118 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169242 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169544 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169347 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169479 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169526 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169464 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169687 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169457 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169527 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169577 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169730 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169598 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169623 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169710 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764170019 Patch available CNA
  • Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764170021 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167834 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167795 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167826 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167876 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168179 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167987 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168476 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168475 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168431 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168662 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168475 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168536 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168609 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168731 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168699 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168859 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764169063 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764169125 Patch available CNA
  • Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764169222 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854289 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854280 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854280 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854319 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761855549 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854321 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854422 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854430 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854457 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854484 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854398 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854494 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854493 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854504 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854489 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761855467 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854524 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1762335558 Patch available CNA
  • Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761855234 Patch available CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Multicluster Global Hub VendorRed Hat Affected — Fixed in — Not affected CNA
  • Multicluster Global Hub VendorRed Hat Affected — Fixed in — Not affected CNA
  • Multicluster Global Hub VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat build of Apicurio Registry 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat build of Apicurio Registry 3 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Fuse 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Web Terminal VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Web Terminal VendorRed Hat Affected — Fixed in — Not affected CNA
  • github.com/operator-framework/operator-sdk (Go) Vendor— Affected before 0.15.2 Fixed in 0.15.2 Patch available GHSA-856v-8qm2-9wjv

CPE names CNA · 28

CPEVersionsRoleVendor
cpe:/a:redhat:container_native_virtualization:4.17::el94.17—Red Hat
cpe:/a:redhat:container_native_virtualization:4.18::el94.18—Red Hat
cpe:/a:redhat:container_native_virtualization:4.20::el94.20—Red Hat
cpe:/a:redhat:multicluster_engine:2.6::el92.6—Red Hat
cpe:/a:redhat:multicluster_engine:2.7::el92.7—Red Hat
cpe:/a:redhat:multicluster_engine:2.8::el92.8—Red Hat
cpe:/a:redhat:multicluster_engine:2.9::el92.9—Red Hat
cpe:/a:redhat:openshift_compliance_operator:1::el91—Red Hat
cpe:/a:redhat:openshift_file_integrity_operator:1::el91—Red Hat
cpe:/a:redhat:acm:2.11::el92.11—Red Hat
  • cpe:/a:redhat:container_native_virtualization:4.17::el9 Versions 4.17 — ·Red Hat
  • cpe:/a:redhat:container_native_virtualization:4.18::el9 Versions 4.18 — ·Red Hat
  • cpe:/a:redhat:container_native_virtualization:4.20::el9 Versions 4.20 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.6::el9 Versions 2.6 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.7::el9 Versions 2.7 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.8::el9 Versions 2.8 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine:2.9::el9 Versions 2.9 — ·Red Hat
  • cpe:/a:redhat:openshift_compliance_operator:1::el9 Versions 1 — ·Red Hat
  • cpe:/a:redhat:openshift_file_integrity_operator:1::el9 Versions 1 — ·Red Hat
  • cpe:/a:redhat:acm:2.11::el9 Versions 2.11 — ·Red Hat
Show 18 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:acm:2.12::el92.12—Red Hat
cpe:/a:redhat:acm:2.13::el92.13—Red Hat
cpe:/a:redhat:acm:2.14::el92.14—Red Hat
cpe:/a:redhat:openshift_data_foundation:4.14::el94.14—Red Hat
cpe:/a:redhat:openshift_data_foundation:4.15::el94.15—Red Hat
cpe:/a:redhat:openshift_data_foundation:4.16::el94.16—Red Hat
cpe:/a:redhat:openshift_data_foundation:4.17::el94.17—Red Hat
cpe:/a:redhat:openshift_data_foundation:4.18::el94.18—Red Hat
cpe:/a:redhat:multicluster_engine——Red Hat
cpe:/a:redhat:multicluster_globalhub——Red Hat
cpe:/a:redhat:acm:22—Red Hat
cpe:/a:redhat:advanced_cluster_security:44—Red Hat
cpe:/a:redhat:service_registry:22—Red Hat
cpe:/a:redhat:apicurio_registry:33—Red Hat
cpe:/a:redhat:jboss_fuse:77—Red Hat
cpe:/a:redhat:openshift:44—Red Hat
cpe:/a:redhat:container_native_virtualization:44—Red Hat
cpe:/a:redhat:webterminal:11—Red Hat
  • cpe:/a:redhat:acm:2.12::el9 Versions 2.12 — ·Red Hat
  • cpe:/a:redhat:acm:2.13::el9 Versions 2.13 — ·Red Hat
  • cpe:/a:redhat:acm:2.14::el9 Versions 2.14 — ·Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.14::el9 Versions 4.14 — ·Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.15::el9 Versions 4.15 — ·Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.16::el9 Versions 4.16 — ·Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.17::el9 Versions 4.17 — ·Red Hat
  • cpe:/a:redhat:openshift_data_foundation:4.18::el9 Versions 4.18 — ·Red Hat
  • cpe:/a:redhat:multicluster_engine Versions — — ·Red Hat
  • cpe:/a:redhat:multicluster_globalhub Versions — — ·Red Hat
  • cpe:/a:redhat:acm:2 Versions 2 — ·Red Hat
  • cpe:/a:redhat:advanced_cluster_security:4 Versions 4 — ·Red Hat
  • cpe:/a:redhat:service_registry:2 Versions 2 — ·Red Hat
  • cpe:/a:redhat:apicurio_registry:3 Versions 3 — ·Red Hat
  • cpe:/a:redhat:jboss_fuse:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
  • cpe:/a:redhat:container_native_virtualization:4 Versions 4 — ·Red Hat
  • cpe:/a:redhat:webterminal:1 Versions 1 — ·Red Hat

Remediation

  • Fix · CNA operator-sdk (operator-framework) Fixed in 0.15.2
  • Fix · GHSA-856v-8qm2-9wjv github.com/operator-framework/operator-sdk (Go) Fixed in 0.15.2 Advisory →

Red Hat 21 advisories

  • RHSA-2026:5633 Released 2026-03-24 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.12.8 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9 +23
  • RHSA-2026:2572 Released 2026-02-11 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.2 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/config-policy-controller-rhel9 +16
  • RHSA-2026:0737 Released 2026-01-15 · Red Hat rating Low
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
Show 18 more Red Hat advisories
  • RHSA-2026:0722 Released 2026-01-15 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.4 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9 +14
  • RHSA-2026:0718 Released 2026-01-15 · Red Hat rating Important
    Moderate: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +24
  • RHSA-2026:0627 Released 2026-01-14 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +19
  • RHSA-2025:23542 Released 2025-12-17 · Red Hat rating Low
    OpenShift File Integrity Operator bug fix and enhancement update
    • OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
  • RHSA-2025:23529 Released 2025-12-17 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes 2.11.9 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/console-rhel9, registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9, registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9 +3
  • RHSA-2025:23528 Released 2025-12-17 · Red Hat rating Important
    multicluster engine for Kubernetes 2.6 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +6
  • RHSA-2025:22684 Released 2025-12-03 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9 +5
  • RHSA-2025:22683 Released 2025-12-03 · Red Hat rating Moderate
    multicluster engine for Kubernetes v2.7.7 security update
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +8
  • RHSA-2025:22420 Released 2025-12-01 · Red Hat rating Moderate
    Red Hat OpenShift Data Foundation 4.14 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.14 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-cli-rhel9, registry.redhat.io/odf4/mcg-core-rhel9 +15
  • RHSA-2025:22418 Released 2025-12-01 · Red Hat rating Moderate
    Red Hat OpenShift Data Foundation 4.15 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.15 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-core-rhel9, registry.redhat.io/odf4/mcg-rhel9-operator +15
  • RHSA-2025:22416 Released 2025-12-01 · Red Hat rating Moderate
    Red Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.16 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-core-rhel9, registry.redhat.io/odf4/mcg-rhel9-operator +15
  • RHSA-2025:22415 Released 2025-12-01 · Red Hat rating Moderate
    Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.17 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2025:21885 Released 2025-11-20 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-content-rhel8, registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8, registry.redhat.io/compliance/openshift-compliance-openscap-rhel8 +1
  • RHSA-2025:21368 Released 2025-11-13 · Red Hat rating Moderate
    Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2025:19961 Released 2025-11-10 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9 +6
  • RHSA-2025:19958 Released 2025-11-10 · Red Hat rating Moderate
    multicluster engine for Kubernetes v2.7.7 security update
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +5
  • RHSA-2025:19335 Released 2025-10-30 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes 2.14.1 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +9
  • RHSA-2025:19332 Released 2025-10-30 · Red Hat rating Important
    multicluster engine for Kubernetes 2.9.1 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9 +7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Multicluster Engine for KubernetesAffectedNo fix yet: Fix deferred
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix planned: Out of support scope
Red Hat Fuse 7AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat build of Apicurio Registry 2AffectedNo fix planned: Out of support scope
CNV 4.17 for RHEL 9Fixed—
CNV 4.18 for RHEL 9Fixed—
CNV 4.20 for RHEL 9Fixed—
OpenShift Compliance Operator 1Fixed RHSA-2025:21885, RHSA-2026:0737
OpenShift File Integrity Operator - FIO 1Fixed RHSA-2025:23542
Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed RHSA-2025:23529
Red Hat Advanced Cluster Management for Kubernetes 2.12Fixed RHSA-2025:19961, RHSA-2026:5633
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:0627, RHSA-2026:0718
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2025:19335, RHSA-2026:2572
Red Hat Openshift Data Foundation 4.14Fixed RHSA-2025:22420
Red Hat Openshift Data Foundation 4.15Fixed RHSA-2025:22418
Red Hat Openshift Data Foundation 4.16Fixed RHSA-2025:22416
Red Hat Openshift Data Foundation 4.17Fixed RHSA-2025:22415
Red Hat Openshift Data Foundation 4.18Fixed RHSA-2025:21368
multicluster engine for Kubernetes 2.6Fixed RHSA-2025:23528
multicluster engine for Kubernetes 2.7Fixed RHSA-2025:19958, RHSA-2025:22683
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:0722
multicluster engine for Kubernetes 2.9Fixed RHSA-2025:19332
Not affected: 26 products
  • CNV 4.17 for RHEL 9
  • CNV 4.18 for RHEL 9
  • CNV 4.20 for RHEL 9
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub
  • OpenShift Compliance Operator 1
  • OpenShift File Integrity Operator - FIO 1
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.11
  • Red Hat Advanced Cluster Management for Kubernetes 2.12
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Security 4
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Virtualization 4
  • Red Hat Openshift Data Foundation 4.14
  • Red Hat Openshift Data Foundation 4.15
  • Red Hat Openshift Data Foundation 4.16
  • Red Hat Openshift Data Foundation 4.17
  • Red Hat Openshift Data Foundation 4.18
  • Red Hat Web Terminal
  • Red Hat build of Apicurio Registry 3
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.7
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-7195
  2. 2026-10-03 Alias added: GHSA-856v-8qm2-9wjv

References

Sources