# Red Hat Advanced Cluster Security 4.2.

Every CVE that names Red Hat Advanced Cluster Security 4.2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Stackrox: missing http security headers allows for clickjacking in web ui](https://agentprime.io/advisories/CVE-2023-4958.md)
  `CVE-2023-4958` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-1021
- [Postgresql: role pg_signal_backend can signal certain superuser processes.](https://agentprime.io/advisories/CVE-2023-5870.md)
  `CVE-2023-5870` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 10 Dec 2023 · Tags: Denial of service
- [Postgresql: memory disclosure in aggregate function calls](https://agentprime.io/advisories/CVE-2023-5868.md)
  `CVE-2023-5868` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2023 · Tags: CWE-686
- [Postgresql: buffer overrun from integer overflow in array modification](https://agentprime.io/advisories/CVE-2023-5869.md)
  `CVE-2023-5869` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2023 · Tags: Memory corruption
- [Postgresql: extension script @substitutions@ within quoting allow sql injection](https://agentprime.io/advisories/CVE-2023-39417.md)
  `CVE-2023-39417` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-advanced-cluster-security-4-2>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-advanced-cluster-security-4-2/>. Everything for agents: <https://agentprime.io/llms.txt>.