Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2022-4039

Rhsso-container-image: unsecured management interface exposed to adjecent network

Description

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.6-20 to < *unaffected

Red Hat Red Hat Single Sign-On 7

Default version status: affected

References