Published: 11/04/2022 Updated: 12/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat origin-aggregated-logging 3.11

Synopsis Moderate: OpenShift Logging bug fix and security update (535) Type/Severity Security Advisory: Moderate Topic OpenShift Logging bug fix and security update (535)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed se ...

Synopsis Moderate: OpenShift Logging bug fix and security update (528) Type/Severity Security Advisory: Moderate Topic OpenShift Logging bug fix and security update (528)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed se ...

Synopsis Moderate: OpenShift Logging bug fix and security update (519) Type/Severity Security Advisory: Moderate Topic OpenShift Logging bug fix and security update (519)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed se ...

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete The vulnerable netty-codec-http maven package was not removed from the image content ...

CWE-444 https://github.com/openshift/origin-aggregated-logging/commit/d6b72d6c32e7c06b65324294d10406546734004d https://bugzilla.redhat.com/show_bug.cgi?id=2052539 https://access.redhat.com/security/cve/CVE-2021-21409 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2022:0721 https://access.redhat.com/security/cve/cve-2022-0552

CVE-2022-0552

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect