Search for packages
| purl | pkg:rpm/redhat/openshift@4.12.0-202301042257.p0.g77bec7a.assembly.stream?arch=el8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-92ak-64hu-dbg1
Aliases: CVE-2022-3172 |
kube-apiserver: Aggregated API server can cause clients to be redirected (SSRF) | There are no reported fixed by versions. |
|
VCID-ea5d-jxkg-mbhn
Aliases: CVE-2022-3162 GHSA-2394-5535-8j88 |
Kubernetes vulnerable to path traversal Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions sharing the same API group 2. Users have cluster-wide list or watch authorization on one of those custom resources. 3. The same users are not authorized to read another custom resource in the same API group. | There are no reported fixed by versions. |
|
VCID-pehm-pzkq-2bdf
Aliases: CVE-2022-3259 |
OpenShift: Missing HTTP Strict Transport Security | There are no reported fixed by versions. |
|
VCID-x63z-bjr8-j7d7
Aliases: CVE-2022-2996 GHSA-rf3f-3p37-2qh4 PYSEC-2022-43152 |
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:58:18.160113+00:00 | RedHat Importer | Affected by | VCID-x63z-bjr8-j7d7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2996.json | 38.0.0 |
| 2026-04-01T13:58:03.724095+00:00 | RedHat Importer | Affected by | VCID-pehm-pzkq-2bdf | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3259.json | 38.0.0 |
| 2026-04-01T13:57:08.503266+00:00 | RedHat Importer | Affected by | VCID-92ak-64hu-dbg1 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3172.json | 38.0.0 |
| 2026-04-01T13:56:28.236448+00:00 | RedHat Importer | Affected by | VCID-ea5d-jxkg-mbhn | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3162.json | 38.0.0 |