Skip to content
OpenAdvisories
Medium WID-SEC-2023-3113 1 CVE

Red Hat Advanced Cluster Security: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 11, 2023 · Updated Dec 11, 2023 · de-DE

Vendor: Red Hat Product: Enterprise Linux RHACS < 4.3.1 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Advanced Cluster Security ausnutzen, um Informationen offenzulegen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 1

  • Critical 9.3
    CVE-2022-39222

    OAuth authorization code exposure in Dex

    Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability if they are running a v…

    dexidp dex github.com/dexidp/dex Go

Revision history

  1. #1

    Initiale Fassung

References