Advisories · Technology
Red Hat Cost Management 4.
Every CVE that names Red Hat Cost Management 4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
- Red Hat Cost Management 4
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)
- Red Hat Cost Management 4
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
- Red Hat Cost Management 4
- Server-side request forgery (SSRF)
- CVSS 6.2 Medium
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 5.3 Medium
P11-kit: null dereference via c_derivekey with specific null parameters
- p11-glue p11-kit
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 4.4 Medium
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption