Advisories · Technology
Red Hat RHEL-8 based Middleware Containers.
Every CVE that names Red Hat RHEL-8 based Middleware Containers among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Authentication bypass
- CVSS 5.3 Medium
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 4.0 Medium
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.8 High
Linux-pam: linux-pam directory traversal
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 6.1 Medium
Wildfly: wildfly vulnerable to cross-site scripting (xss)
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Operator: passwords defined in secrets shown in statefulset yaml
- Red Hat RHEL-8 based Middleware Containers
- Red Hat AMQ Broker 7
- CWE-313
- CVSS 5.5 Medium
Operator: plaintext password in operator log
- Red Hat RHEL-8 based Middleware Containers
- Red Hat AMQ Broker 7
- Other injection
- CVSS 8.0 High
Rhsso-container-image: unsecured management interface exposed to adjecent network
- Red Hat RHEL-8 based Middleware Containers
- Red Hat Single Sign-On 7
- Broken access control