Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 18 fixed, 6 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| operator-framework | operator-sdk | before 0.15.2 | 0.15.2 | Patch available | CNA |
| Red Hat | RHEL-9-CNV-4.17 | — | v4.17.39-2 | Patch available | CNA |
| Red Hat | RHEL-9-CNV-4.18 | — | v4.18.25-3 | Patch available | CNA |
| Red Hat | RHEL-9-CNV-4.20 | — | v4.20.3-3 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.6 | — | v2.6 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.7 | — | v2.7 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765872406 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1766360304 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765669648 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765866268 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765872399 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765872402 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765872398 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.8 | — | 1765872400 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | multicluster engine for Kubernetes 2.9 | — | v2.9 | Patch available | CNA |
| Red Hat | OpenShift Compliance Operator 1 | — | 1.8.0 | Patch available | CNA |
| Red Hat | OpenShift Compliance Operator 1 | — | 1768172669 | Patch available | CNA |
| Red Hat | OpenShift File Integrity Operator - FIO 1 | — | v1.3 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | — | v2.11 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | — | v2.11 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | — | v2.11 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | — | v2.11 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | v2.12 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | 1773285089 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | 1773259164 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | 1773259182 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | 1773358651 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.12 | — | 1773090513 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | — | 1767569821 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | — | 1767829032 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | — | 1767569821 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | — | 1767656229 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | — | 1767829032 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | v2.14 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | v2.14 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | v2.14 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | v2.14 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | v2.14 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | v2.14 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | 1769720041 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | 1770343757 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | 1769721579 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | — | 1770336554 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178221 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178222 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178236 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178273 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178715 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178261 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178354 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178419 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178768 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178319 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178386 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178406 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178615 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178379 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178329 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178423 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764178419 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.14 | — | v4.14-1764215448 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176261 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176342 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176372 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176892 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176485 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176698 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176699 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176675 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764177101 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176690 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764221806 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764222436 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764177174 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764177033 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764176958 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764177101 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764177020 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.15 | — | v4.15-1764177029 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764168955 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169118 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169242 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169544 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169347 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169479 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169526 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169464 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169687 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169457 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169527 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169577 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169730 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169598 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169623 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764169710 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764170019 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.16 | — | v4.16-1764170021 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764167834 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764167795 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764167826 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764167876 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168179 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764167987 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168476 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168475 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168431 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168662 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168475 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168536 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168609 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168731 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168699 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764168859 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764169063 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764169125 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.17 | — | v4.17-1764169222 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854289 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854280 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854280 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854319 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761855549 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854321 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854422 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854430 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854457 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854484 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854398 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854494 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854493 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854504 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854489 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761855467 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761854524 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1762335558 | Patch available | CNA |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | — | v4.18-1761855234 | Patch available | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | No fix listed | CNA |
| Red Hat | Multicluster Global Hub | — | — | Not affected | CNA |
| Red Hat | Multicluster Global Hub | — | — | Not affected | CNA |
| Red Hat | Multicluster Global Hub | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat build of Apicurio Registry 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat build of Apicurio Registry 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat Fuse 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat Web Terminal | — | — | Not affected | CNA |
| Red Hat | Red Hat Web Terminal | — | — | Not affected | CNA |
| — | github.com/operator-framework/operator-sdk (Go) | before 0.15.2 | 0.15.2 | Patch available | GHSA-856v-8qm2-9wjv |
- operator-sdk Vendoroperator-framework Affected before 0.15.2 Fixed in 0.15.2 Patch available CNA
- RHEL-9-CNV-4.17 VendorRed Hat Affected — Fixed in v4.17.39-2 Patch available CNA
- RHEL-9-CNV-4.18 VendorRed Hat Affected — Fixed in v4.18.25-3 Patch available CNA
- RHEL-9-CNV-4.20 VendorRed Hat Affected — Fixed in v4.20.3-3 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.6 VendorRed Hat Affected — Fixed in v2.6 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.7 VendorRed Hat Affected — Fixed in v2.7 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872406 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1766360304 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765669648 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765866268 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872399 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872402 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872398 Patch available CNA
- multicluster engine for Kubernetes 2.8 VendorRed Hat Affected — Fixed in 1765872400 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- multicluster engine for Kubernetes 2.9 VendorRed Hat Affected — Fixed in v2.9 Patch available CNA
- OpenShift Compliance Operator 1 VendorRed Hat Affected — Fixed in 1.8.0 Patch available CNA
- OpenShift Compliance Operator 1 VendorRed Hat Affected — Fixed in 1768172669 Patch available CNA
- OpenShift File Integrity Operator - FIO 1 VendorRed Hat Affected — Fixed in v1.3 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.11 VendorRed Hat Affected — Fixed in v2.11 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in v2.12 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773285089 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773259164 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773259182 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773358651 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.12 VendorRed Hat Affected — Fixed in 1773090513 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767569821 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767829032 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767569821 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767656229 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.13 VendorRed Hat Affected — Fixed in 1767829032 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in v2.14 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1769720041 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1770343757 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1769721579 Patch available CNA
- Red Hat Advanced Cluster Management for Kubernetes 2.14 VendorRed Hat Affected — Fixed in 1770336554 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178221 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178222 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178236 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178273 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178715 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178261 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178354 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178419 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178768 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178319 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178386 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178406 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178615 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178379 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178329 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178423 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764178419 Patch available CNA
- Red Hat Openshift Data Foundation 4.14 VendorRed Hat Affected — Fixed in v4.14-1764215448 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176261 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176342 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176372 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176892 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176485 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176698 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176699 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176675 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177101 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176690 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764221806 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764222436 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177174 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177033 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764176958 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177101 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177020 Patch available CNA
- Red Hat Openshift Data Foundation 4.15 VendorRed Hat Affected — Fixed in v4.15-1764177029 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764168955 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169118 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169242 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169544 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169347 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169479 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169526 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169464 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169687 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169457 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169527 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169577 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169730 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169598 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169623 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764169710 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764170019 Patch available CNA
- Red Hat Openshift Data Foundation 4.16 VendorRed Hat Affected — Fixed in v4.16-1764170021 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167834 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167795 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167826 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167876 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168179 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764167987 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168476 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168475 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168431 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168662 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168475 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168536 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168609 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168731 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168699 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764168859 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764169063 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764169125 Patch available CNA
- Red Hat Openshift Data Foundation 4.17 VendorRed Hat Affected — Fixed in v4.17-1764169222 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854289 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854280 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854280 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854319 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761855549 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854321 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854422 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854430 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854457 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854484 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854398 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854494 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854493 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854504 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854489 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761855467 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761854524 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1762335558 Patch available CNA
- Red Hat Openshift Data Foundation 4.18 VendorRed Hat Affected — Fixed in v4.18-1761855234 Patch available CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — No fix listed CNA
- Multicluster Global Hub VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Global Hub VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Global Hub VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat build of Apicurio Registry 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat build of Apicurio Registry 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Fuse 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Web Terminal VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Web Terminal VendorRed Hat Affected — Fixed in — Not affected CNA
- github.com/operator-framework/operator-sdk (Go) Vendor— Affected before 0.15.2 Fixed in 0.15.2 Patch available GHSA-856v-8qm2-9wjv
CPE names CNA · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:container_native_virtualization:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:container_native_virtualization:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:container_native_virtualization:4.20::el9 | 4.20 | — | Red Hat |
| cpe:/a:redhat:multicluster_engine:2.6::el9 | 2.6 | — | Red Hat |
| cpe:/a:redhat:multicluster_engine:2.7::el9 | 2.7 | — | Red Hat |
| cpe:/a:redhat:multicluster_engine:2.8::el9 | 2.8 | — | Red Hat |
| cpe:/a:redhat:multicluster_engine:2.9::el9 | 2.9 | — | Red Hat |
| cpe:/a:redhat:openshift_compliance_operator:1::el9 | 1 | — | Red Hat |
| cpe:/a:redhat:openshift_file_integrity_operator:1::el9 | 1 | — | Red Hat |
| cpe:/a:redhat:acm:2.11::el9 | 2.11 | — | Red Hat |
- cpe:/a:redhat:container_native_virtualization:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:container_native_virtualization:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:container_native_virtualization:4.20::el9 Versions 4.20 — ·Red Hat
- cpe:/a:redhat:multicluster_engine:2.6::el9 Versions 2.6 — ·Red Hat
- cpe:/a:redhat:multicluster_engine:2.7::el9 Versions 2.7 — ·Red Hat
- cpe:/a:redhat:multicluster_engine:2.8::el9 Versions 2.8 — ·Red Hat
- cpe:/a:redhat:multicluster_engine:2.9::el9 Versions 2.9 — ·Red Hat
- cpe:/a:redhat:openshift_compliance_operator:1::el9 Versions 1 — ·Red Hat
- cpe:/a:redhat:openshift_file_integrity_operator:1::el9 Versions 1 — ·Red Hat
- cpe:/a:redhat:acm:2.11::el9 Versions 2.11 — ·Red Hat
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:acm:2.12::el9 | 2.12 | — | Red Hat |
| cpe:/a:redhat:acm:2.13::el9 | 2.13 | — | Red Hat |
| cpe:/a:redhat:acm:2.14::el9 | 2.14 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:multicluster_engine | — | — | Red Hat |
| cpe:/a:redhat:multicluster_globalhub | — | — | Red Hat |
| cpe:/a:redhat:acm:2 | 2 | — | Red Hat |
| cpe:/a:redhat:advanced_cluster_security:4 | 4 | — | Red Hat |
| cpe:/a:redhat:service_registry:2 | 2 | — | Red Hat |
| cpe:/a:redhat:apicurio_registry:3 | 3 | — | Red Hat |
| cpe:/a:redhat:jboss_fuse:7 | 7 | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
| cpe:/a:redhat:container_native_virtualization:4 | 4 | — | Red Hat |
| cpe:/a:redhat:webterminal:1 | 1 | — | Red Hat |
- cpe:/a:redhat:acm:2.12::el9 Versions 2.12 — ·Red Hat
- cpe:/a:redhat:acm:2.13::el9 Versions 2.13 — ·Red Hat
- cpe:/a:redhat:acm:2.14::el9 Versions 2.14 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:multicluster_engine Versions — — ·Red Hat
- cpe:/a:redhat:multicluster_globalhub Versions — — ·Red Hat
- cpe:/a:redhat:acm:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:advanced_cluster_security:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:service_registry:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:apicurio_registry:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:jboss_fuse:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:container_native_virtualization:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:webterminal:1 Versions 1 — ·Red Hat
Remediation
- Fix · CNA operator-sdk (operator-framework) Fixed in 0.15.2
- Fix · GHSA-856v-8qm2-9wjv github.com/operator-framework/operator-sdk (Go) Fixed in 0.15.2 Advisory →
Red Hat 21 advisories
- RHSA-2026:5633 Released 2026-03-24 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes v2.12.8 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9 +23
- RHSA-2026:2572 Released 2026-02-11 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes v2.14.2 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/config-policy-controller-rhel9 +16
- RHSA-2026:0737 Released 2026-01-15 · Red Hat rating LowOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
Show 18 more Red Hat advisories
- RHSA-2026:0722 Released 2026-01-15 · Red Hat rating Importantmulticluster engine for Kubernetes v2.8.4 security update
- multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9 +14
- RHSA-2026:0718 Released 2026-01-15 · Red Hat rating ImportantModerate: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +24
- RHSA-2026:0627 Released 2026-01-14 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +19
- RHSA-2025:23542 Released 2025-12-17 · Red Hat rating LowOpenShift File Integrity Operator bug fix and enhancement update
- OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
- RHSA-2025:23529 Released 2025-12-17 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes 2.11.9 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/console-rhel9, registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9, registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9 +3
- RHSA-2025:23528 Released 2025-12-17 · Red Hat rating Importantmulticluster engine for Kubernetes 2.6 security update
- multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +6
- RHSA-2025:22684 Released 2025-12-03 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9 +5
- RHSA-2025:22683 Released 2025-12-03 · Red Hat rating Moderatemulticluster engine for Kubernetes v2.7.7 security update
- multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +8
- RHSA-2025:22420 Released 2025-12-01 · Red Hat rating ModerateRed Hat OpenShift Data Foundation 4.14 security, enhancement & bug fix update
- Red Hat Openshift Data Foundation 4.14 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-cli-rhel9, registry.redhat.io/odf4/mcg-core-rhel9 +15
- RHSA-2025:22418 Released 2025-12-01 · Red Hat rating ModerateRed Hat OpenShift Data Foundation 4.15 security, enhancement & bug fix update
- Red Hat Openshift Data Foundation 4.15 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-core-rhel9, registry.redhat.io/odf4/mcg-rhel9-operator +15
- RHSA-2025:22416 Released 2025-12-01 · Red Hat rating ModerateRed Hat OpenShift Data Foundation 4.16 security, enhancement & bug fix update
- Red Hat Openshift Data Foundation 4.16 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-core-rhel9, registry.redhat.io/odf4/mcg-rhel9-operator +15
- RHSA-2025:22415 Released 2025-12-01 · Red Hat rating ModerateRed Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update
- Red Hat Openshift Data Foundation 4.17 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
- RHSA-2025:21885 Released 2025-11-20 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-content-rhel8, registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8, registry.redhat.io/compliance/openshift-compliance-openscap-rhel8 +1
- RHSA-2025:21368 Released 2025-11-13 · Red Hat rating ModerateRed Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update
- Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
- RHSA-2025:19961 Released 2025-11-10 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9 +6
- RHSA-2025:19958 Released 2025-11-10 · Red Hat rating Moderatemulticluster engine for Kubernetes v2.7.7 security update
- multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +5
- RHSA-2025:19335 Released 2025-10-30 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes 2.14.1 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +9
- RHSA-2025:19332 Released 2025-10-30 · Red Hat rating Importantmulticluster engine for Kubernetes 2.9.1 security update
- multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9 +7
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Multicluster Engine for Kubernetes | Affected | No fix yet: Fix deferred |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix planned: Out of support scope |
| Red Hat Fuse 7 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet |
| Red Hat build of Apicurio Registry 2 | Affected | No fix planned: Out of support scope |
| CNV 4.17 for RHEL 9 | Fixed | — |
| CNV 4.18 for RHEL 9 | Fixed | — |
| CNV 4.20 for RHEL 9 | Fixed | — |
| OpenShift Compliance Operator 1 | Fixed | RHSA-2025:21885, RHSA-2026:0737 |
| OpenShift File Integrity Operator - FIO 1 | Fixed | RHSA-2025:23542 |
| Red Hat Advanced Cluster Management for Kubernetes 2.11 | Fixed | RHSA-2025:23529 |
| Red Hat Advanced Cluster Management for Kubernetes 2.12 | Fixed | RHSA-2025:19961, RHSA-2026:5633 |
| Red Hat Advanced Cluster Management for Kubernetes 2.13 | Fixed | RHSA-2026:0627, RHSA-2026:0718 |
| Red Hat Advanced Cluster Management for Kubernetes 2.14 | Fixed | RHSA-2025:19335, RHSA-2026:2572 |
| Red Hat Openshift Data Foundation 4.14 | Fixed | RHSA-2025:22420 |
| Red Hat Openshift Data Foundation 4.15 | Fixed | RHSA-2025:22418 |
| Red Hat Openshift Data Foundation 4.16 | Fixed | RHSA-2025:22416 |
| Red Hat Openshift Data Foundation 4.17 | Fixed | RHSA-2025:22415 |
| Red Hat Openshift Data Foundation 4.18 | Fixed | RHSA-2025:21368 |
| multicluster engine for Kubernetes 2.6 | Fixed | RHSA-2025:23528 |
| multicluster engine for Kubernetes 2.7 | Fixed | RHSA-2025:19958, RHSA-2025:22683 |
| multicluster engine for Kubernetes 2.8 | Fixed | RHSA-2026:0722 |
| multicluster engine for Kubernetes 2.9 | Fixed | RHSA-2025:19332 |
Not affected: 26 products
- CNV 4.17 for RHEL 9
- CNV 4.18 for RHEL 9
- CNV 4.20 for RHEL 9
- Multicluster Engine for Kubernetes
- Multicluster Global Hub
- OpenShift Compliance Operator 1
- OpenShift File Integrity Operator - FIO 1
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Advanced Cluster Management for Kubernetes 2.11
- Red Hat Advanced Cluster Management for Kubernetes 2.12
- Red Hat Advanced Cluster Management for Kubernetes 2.13
- Red Hat Advanced Cluster Management for Kubernetes 2.14
- Red Hat Advanced Cluster Security 4
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Virtualization 4
- Red Hat Openshift Data Foundation 4.14
- Red Hat Openshift Data Foundation 4.15
- Red Hat Openshift Data Foundation 4.16
- Red Hat Openshift Data Foundation 4.17
- Red Hat Openshift Data Foundation 4.18
- Red Hat Web Terminal
- Red Hat build of Apicurio Registry 3
- multicluster engine for Kubernetes 2.6
- multicluster engine for Kubernetes 2.7
- multicluster engine for Kubernetes 2.8
- multicluster engine for Kubernetes 2.9
Timeline
- 2026-10-02 Threatist record created from CVE-2025-7195
- 2026-10-03 Alias added: GHSA-856v-8qm2-9wjv
References
Advisory 25
- RHEA-2025:23406
- RHEA-2025:23478
- RHEA-2026:0129
- RHSA-2025:19332
- RHSA-2025:19335
- RHSA-2025:19958
- RHSA-2025:19961
- RHSA-2025:21368
- RHSA-2025:21885
- RHSA-2025:22415
- RHSA-2025:22416
- RHSA-2025:22418
- RHSA-2025:22420
- RHSA-2025:22683
- RHSA-2025:22684
- RHSA-2025:23528
- RHSA-2025:23529
- RHSA-2025:23542
- RHSA-2026:0627
- RHSA-2026:0718
- RHSA-2026:0722
- RHSA-2026:0737
- RHSA-2026:2572
- RHSA-2026:5633
- https://nvd.nist.gov/vuln/detail/CVE-2025-7195
Sources
- CVE-2025-7195 · CVE Program
- CVE-2025-7195 · NVD
- FIRST EPSS
- GHSA-856v-8qm2-9wjv · GitHub Advisory Database · CC BY 4.0
- CVE-2025-7195 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences