Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat OpenShift distributed tracing 3, Red Hat OpenShift distributed tracing 3.5.3 — RHSA-2025:3740 Clear all filters
TI-2025-02435 CVE-2025-2786 · GHSA-28gr-56hr-prp6

Tempo-operator: serviceaccount token exposure leading to token and subject access reviews in openshift tempo operator

Priority LOW 20

A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00376 Published 2025-04-02 Partial fix · 0.15.3, rhosdt-3.5-1743162265 +2 CWE-200