Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update

Fixed packages 10

Vulnerabilities 10

• Critical 9.8
  CVE-2022-31692 Public exploit

  Spring Security authorization rules can be bypassed via forward or include dispatcher types

  Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expe…

  libspring-java org.springframework.security:spring-security-core Ubuntu Maven
  Oct 31, 2022
• Critical 9.8
  CVE-2022-42889 Public exploit EPSS 100%

  Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

  Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.String…

  Apache Software Foundation Apache Commons Text com.guicedee.services:commons-text commons-text Debian Ubuntu Maven
  Oct 13, 2022
• Critical 9.6
  CVE-2023-27898

  Cross-site Scripting vulnerability in Jenkins

  Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a…

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Mar 8, 2023
• Critical 9.1
  CVE-2023-25725 Public exploit

  HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situati…

  haproxy haproxy haproxy Debian Ubuntu Azure Linux
  Feb 14, 2023
• High 8.8
  CVE-2023-24422 Public exploit

  Sandbox bypass in Jenkins Script Security Plugin

  A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execut…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Jan 24, 2023
• High 8.1
  CVE-2022-31690

  spring-security-oauth2-client vulnerable to Privilege Escalation

  Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the br…

  libspring-java org.springframework.security:spring-security-oauth2-client Ubuntu Maven
  Oct 31, 2022
• High 7.0
  CVE-2023-27899

  Incorrect Authorization in Jenkins Core

  Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jen…

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Mar 8, 2023
• Medium 5.3
  CVE-2023-27904

  Information disclosure through error stack traces related to agents

  Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Mar 8, 2023
• Medium 5.1
  CVE-2022-3172 Public exploit

  Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

  A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third partie…

  Kubernetes kube-apiserver kubernetes Debian
  Nov 3, 2023
• Medium 4.4
  CVE-2023-27903

  Incorrect Authorization in Jenkins Core

  Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to …

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Mar 8, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2127804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2162200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2162206
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2164278
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2177626
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2177629
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2177632
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2177634
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1655.json
• report
  https://access.redhat.com/security/cve/CVE-2022-3172
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3172
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3172
• article
  https://github.com/kubernetes/kubernetes/issues/112513
• report
  https://access.redhat.com/security/cve/CVE-2022-31690
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-31690
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-31690
• article
  https://spring.io/security/cve-2022-31690
• report
  https://access.redhat.com/security/cve/CVE-2022-31692
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-31692
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-31692
• article
  https://spring.io/security/cve-2022-31692
• report
  https://access.redhat.com/security/cve/CVE-2022-42889
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42889
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42889
• article
  https://blogs.apache.org/security/entry/cve-2022-42889
• article
  https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
• article
  https://seclists.org/oss-sec/2022/q4/22
• report
  https://access.redhat.com/security/cve/CVE-2023-24422
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-24422
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-24422
• article
  https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016
• report
  https://access.redhat.com/security/cve/CVE-2023-25725
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2169089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-25725
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-25725
• article
  https://www.haproxy.com/blog/february-2023-header-parser-fixed/