CVE-2022-4039
Rhsso-container-image: unsecured management interface exposed to adjecent network
- State
- Published
- Severity
- 8.0 High
- Published
- Sep 22, 2023
- Updated
- Sep 24, 2024
- Reserved
- Nov 16, 2022
Description
A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.0 High | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | redhat |
Weaknesses
- CWE-276 Incorrect Default Permissions
Affected Products
| Product | Versions |
|---|---|
RHEL-8 based Middleware ContainersRed Hat |
|
Red Hat Single Sign-On 7Red Hat |
References
- RHSA-2023:1047vendor-advisory
- https://access.redhat.com/security/cve/CVE-2022-4039vdb-entry
- RHBZ#2143416issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.