Medium WID-SEC-2022-0417 6 CVEs

Red Hat OpenShift Service Mesh: Mehrere Schwachstellen

Published May 5, 2022 · Updated Jun 2, 2026 · Revision 18 · de-DE

Vendor: Atlassian Vendor: IBM Vendor: Red Hat Vendor: Splunk Vendor: SUSE Product: App Connect Enterprise Product: Bitbucket Product: Enterprise Product: Enterprise Linux Product: Linux Product: openshift Product: Sterling Connect:Direct Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

Product

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Vulnerabilities 6

Critical 9.8

CVE-2021-44906 Public exploit

Prototype Pollution in minimist

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

js-jquery minimist node-minimist node-minimist Debian Ubuntu Azure Linux npm

Mar 17, 2022
High 8.8

CVE-2022-0235

Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

node-fetch node-fetch/node-fetch node-fetch node-fetch Debian Ubuntu npm

Jan 16, 2022
High 7.5

CVE-2022-24771

Improper Verification of Cryptographic Signature in node-forge

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structur…

Digital Bazaar forge node-forge node-node-forge Debian Ubuntu npm

Mar 18, 2022
High 7.5

CVE-2022-24772

Improper Verification of Cryptographic Signature in `node-forge`

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. …

Digital Bazaar forge node-forge node-node-forge Debian Ubuntu npm

Mar 18, 2022
Medium 5.3

CVE-2022-24773

Improper Verification of Cryptographic Signature in `node-forge`

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not properly check `DigestInfo` for a proper ASN.1 structure. This can lead to succ…

Digital Bazaar forge node-forge node-node-forge Debian Ubuntu npm

Mar 18, 2022
Low 2.6

CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.

follow-redirects follow-redirects/follow-redirects js-jquery follow-redirects Debian Ubuntu Azure Linux npm

Feb 9, 2022

Revision history

2026-06-02 #18
Neue Updates von IBM aufgenommen
2026-05-06 #17
Neue Updates von IBM aufgenommen
2025-12-01 #16
Neue Updates von Red Hat aufgenommen
2025-11-18 #15
Neue Updates von Red Hat aufgenommen
2025-11-13 #14
Neue Updates von Red Hat aufgenommen
2025-10-01 #13
Neue Updates von Splunk-SVD aufgenommen
2023-04-12 #12
Neue Updates von Red Hat aufgenommen
2023-03-01 #11
Neue Updates von Red Hat aufgenommen
2023-02-06 #10
Neue Updates von Red Hat aufgenommen
2022-11-28 #9
Neue Updates von Red Hat aufgenommen
2022-10-06 #8
Neue Updates von Red Hat aufgenommen
2022-10-05 #7
Neue Updates von Red Hat aufgenommen
2022-08-24 #6
Neue Updates von Red Hat aufgenommen
2022-08-10 #5
Neue Updates von Red Hat aufgenommen
2022-06-28 #4
Neue Updates von Red Hat aufgenommen
2022-06-20 #3
Neue Updates von SUSE aufgenommen
2022-05-08 #2
Präzisierung betroffenes Produkt
2022-05-05 #1
Initiale Fassung

References

SUSE Security Update SUSE-SU-2022:2144-1 vom 2022-06-21
https://lists.suse.com/pipermail/sle-security-updates/2022-June/011319.html
SUSE Security Update SUSE-SU-2022:2146-1 vom 2022-06-21
https://lists.suse.com/pipermail/sle-security-updates/2022-June/011320.html
SUSE Security Update SUSE-SU-2022:2144-1 vom 2022-06-21
https://lists.suse.com/pipermail/sle-security-updates/2022-June/011321.html
Red Hat Security Advisory RHSA-2022:1739 vom 2022-05-05
https://access.redhat.com/errata/RHSA-2022:1739
Red Hat Security Advisory RHSA-2022:5392 vom 2022-06-28
https://access.redhat.com/errata/RHSA-2022:5392
Red Hat Security Advisory RHSA-2022:5069 vom 2022-08-10
https://access.redhat.com/errata/RHSA-2022:5069
Red Hat Security Advisory RHSA-2022:6156 vom 2022-08-24
https://access.redhat.com/errata/RHSA-2022:6156
Red Hat Security Advisory RHSA-2022:6813 vom 2022-10-05
https://access.redhat.com/errata/RHSA-2022:6813
Red Hat Security Advisory RHSA-2022:6835 vom 2022-10-06
https://access.redhat.com/errata/RHSA-2022:6835
Red Hat Security Advisory RHSA-2022:8652 vom 2022-11-28
https://access.redhat.com/errata/RHSA-2022:8652
Red Hat Security Advisory RHSA-2023:0612 vom 2023-02-06
https://access.redhat.com/errata/RHSA-2023:0612
Red Hat Security Advisory RHSA-2023:1043 vom 2023-03-02
https://access.redhat.com/errata/RHSA-2023:1043
Red Hat Security Advisory RHSA-2023:1049 vom 2023-03-02
https://access.redhat.com/errata/RHSA-2023:1049
Red Hat Security Advisory RHSA-2023:1044 vom 2023-03-02
https://access.redhat.com/errata/RHSA-2023:1044
Red Hat Security Advisory RHSA-2023:1047 vom 2023-03-02
https://access.redhat.com/errata/RHSA-2023:1047
Red Hat Security Advisory RHSA-2023:1045 vom 2023-03-02
https://access.redhat.com/errata/RHSA-2023:1045
Red Hat Security Advisory RHSA-2023:1742 vom 2023-04-12
https://access.redhat.com/errata/RHSA-2023:1742
Splunk Security Advisory SVD-2025-1007 vom 2025-10-01
https://advisory.splunk.com//advisories/SVD-2025-1007
Red Hat Security Advisory RHSA-2025:21368 vom 2025-11-13
https://access.redhat.com/errata/RHSA-2025:21368
Red Hat Security Advisory RHSA-2025:21378 vom 2025-11-13
https://access.redhat.com/errata/RHSA-2025:21378
Red Hat Security Advisory RHSA-2025:21704 vom 2025-11-18
https://access.redhat.com/errata/RHSA-2025:21704
Atlassian Security Bulletin - November 18 2025
https://confluence.atlassian.com/security/security-bulletin-november-18-2025-1671463469.html
Red Hat Security Advisory RHSA-2025:22415 vom 2025-12-01
https://access.redhat.com/errata/RHSA-2025:22415
Red Hat Security Advisory RHSA-2025:22416 vom 2025-12-01
https://access.redhat.com/errata/RHSA-2025:22416
Red Hat Security Advisory RHSA-2025:22418 vom 2025-12-01
https://access.redhat.com/errata/RHSA-2025:22418
Red Hat Security Advisory RHSA-2025:22420 vom 2025-12-01
https://access.redhat.com/errata/RHSA-2025:22420
IBM Security Bulletin 7271910 vom 2026-05-06
https://www.ibm.com/support/pages/node/7271910
IBM Security Bulletin 7274847 vom 2026-06-02
https://www.ibm.com/support/pages/node/7274847