Advisories · Technology
Red Hat Advanced Cluster Security 4.2.
Every CVE that names Red Hat Advanced Cluster Security 4.2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Stackrox: missing http security headers allows for clickjacking in web ui
- Red Hat Advanced Cluster Security 4.2
- Red Hat Advanced Cluster Security 3
- CWE-1021
- CVSS 2.2 Low
Postgresql: role pg_signal_backend can signal certain superuser processes.
- Red Hat Advanced Cluster Security 4.2
- Red Hat Enterprise Linux 8
- Denial of service
- CVSS 4.3 Medium
Postgresql: memory disclosure in aggregate function calls
- Red Hat Advanced Cluster Security 4.2
- Red Hat Enterprise Linux 8
- CWE-686
- CVSS 8.8 High
Postgresql: buffer overrun from integer overflow in array modification
- Red Hat Advanced Cluster Security 4.2
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.5 High
Postgresql: extension script @substitutions@ within quoting allow sql injection
- Red Hat Advanced Cluster Security 4.2
- Red Hat Enterprise Linux 8
- SQL injection