Description
A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cryostat Cryostat
Default version status: unaffected
0 to < 4.0.2affected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
0.5.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4 on RHEL 9
Default version status: affected
4.0.2-3 to < *unaffected
Red Hat Cryostat 4
Default version status: affected
Red Hat Cryostat 4
Default version status: affected
Red Hat Cryostat 4
Default version status: affected