CVE-2022-4039

Published: 22/09/2023 Updated: 07/11/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an malicious user to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat single sign-on 7.0
redhat openshift container platform 4.9
redhat openshift container platform 4.10
redhat openshift container platform for ibm z 4.9
redhat openshift container platform for ibm z 4.10
redhat openshift container platform for linuxone 4.9
redhat openshift container platform for linuxone 4.10
redhat openshift container platform for power 4.9
redhat openshift container platform for power 4.10

Synopsis Important: Red Hat Single Sign-On 762 for OpenShift image security and enhancement update Type/Severity Security Advisory: Important Topic A new image is available for Red Hat Single Sign-On 762, running on RedHat OpenShift Container Platform from the release of 311 up to the releaseof 4120Red Hat Product Security has rated t ...

DescriptionA flaw was found in Keycloak Instances launched by the Operator are configured with an unsecured management interface enabled This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configurationA flaw was found in Keycloak Instances ...

CWE-276 https://access.redhat.com/errata/RHSA-2023:1047 https://access.redhat.com/security/cve/CVE-2022-4039 https://bugzilla.redhat.com/show_bug.cgi?id=2143416 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2023:1047 https://access.redhat.com/security/cve/cve-2022-4039

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-4039

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect