Advisories · Technology
Red Hat Openshift Data Foundation 4.
Every CVE that names Red Hat Openshift Data Foundation 4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal
- Red Hat Openshift Data Foundation 4
- Command injection
- CVSS 7.1 High
Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header
- Red Hat Openshift Data Foundation 4
- Weak cryptography or TLS
- CVSS 9.9 CriticalCritical · CVSS 9+
Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters
- Red Hat Multicluster Global Hub 1.4.9
- Red Hat Multicluster Global Hub 1.5.8
- Broken access control
- CVSS 8.9 High
Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint
- argoproj argo-helm
- Red Hat OpenShift GitOps 1.19
- Authentication bypass
- CVSS 7.0 High
Ocp & fips mode
- openshift
- Red Hat OpenShift Serverless
- CWE-693