RHSA-2022:0856MediumCVSS 8.6

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.11 security updates and bug fixes

Published
March 14, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2021-23434 →CVE-2022-0155 →

📋 Description

CVE-2021-23434 — object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 CVE-2022-0155 — follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor

🎯 Affected products79

  • Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7
  • Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:7e77d74de52b62d1ed97e86fc78cc46a55600788951e946a9bd4147f5a3414c0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:bb5a578f04de3a4ff956b5bdbcb02a54305c71904ac3efd3cd0ae24399707d94_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/acmesolver-rhel8@sha256:fbaefa6f2eb562612173799440d4650d9327a7d27fd580de97f4628f4005ad21_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:730a5d7a36e9b76d05777c377fb7c88f94ca86285103e5976708a42752cb9686_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cainjector-rhel8@sha256:01b8d7629d32020bb1461985f2ad2786fff99d424c78d8347e0e8c2c962807aa_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-manager-controller-rhel8@sha256:7cc936ef648d250c202c3d5b340c86e650a28368195eddaac32636c4ff51dd30_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-manager-webhook-rhel8@sha256:9a8da2dc3166b358fe4d7b07774e3a051ef7f39a0416922800bdb0e3f18297ec_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:41f1733905d2caed241638a8d7960dc2a82265c840783f3876cc5a4c42ecd33b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:db00be399864cae44fdc3b167f8d33f954bd48be783d1020eee9ededb36482c3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/clusterlifecycle-state-metrics-rhel8@sha256:5dec2b87f4a3c3340e41d133b6e6e82a18edd255352e18101e91ec7e7cea2a6c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/config-policy-controller-rhel8@sha256:4deab8136b6b23cbb660d7e0e42f1f58408f451899b404f68bea254fa243a210_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/config-policy-controller-rhel8@sha256:ebcc1697d8abf13631c39bb6256603fb23c0a586cbe2e5f4a8c4d185c1527baa_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/configmap-watcher-rhel8@sha256:bc9af76eda2e12f95f79ecbddcbd05e6c2cabd093676c4cf4b1b63121f23b87e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/console-api-rhel8@sha256:b39a1006cf8fe864e179d646aad220ba52868d547e93718c3ab546db51dba2b8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/console-header-rhel8@sha256:75940afb63fea0c8a2774c96b5bebf041d5dacfc7812660747797c018ac33472_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/console-rhel8@sha256:f040c9ae3cae6eab22869822c9e94fc88ed5ce66dfd7b2bf26b07a8fef77909d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-component-rhel8-operator@sha256:b2ed371abd823a6685e0ef66cf0a9d060f39887a0f5963b1a1a3aca3922089ed_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-component-rhel8-operator@sha256:ce649045245160dce4320d31d1bdda2d83be208ce33f93c1b7fa6a323d05c6da_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-monitoring-rhel8-operator@sha256:28c6f8fa97fd7dcb7c2b0f75051281bad729c074a18f2c0a6178dd1889311fad_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-monitoring-rhel8-operator@sha256:df36c22925da9e46ee7ce68dd2a98b92744d73359254b38ed7df601e28fa1fb3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-rhel8-operator@sha256:1a9d9ad71a2f4b11df2b52fc7a2ff44ab1506754ec4ae4a669b8c723ffaa638d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-propagator-rhel8@sha256:7bac9f8cf5178241f04196cd247cf3de0b974d65380e6a4e217f2b8f7e703de5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-spec-sync-rhel8@sha256:0baf56881ff0afc85b9c010b6d5aa8ff92759cef5462b65615ea17710fb2477b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-spec-sync-rhel8@sha256:344cd37658490b612e6a9d9c8b95d7fda1729a3516c3cdd1665fcc738726cf17_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-status-sync-rhel8@sha256:33c61dcb30a68a77d7c60cb77e29bdf374e506e76bcd89f77cbdd771eeae77af_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-status-sync-rhel8@sha256:ff5b2b92af38f123803787b9c8b1b2dabd7f5698858aeb1a525bf47300e9f4a7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-template-sync-rhel8@sha256:5efbafcaa1b80c49a6059ad20cf2eee1e499ebab3b863618def302cf06852005_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-template-sync-rhel8@sha256:836344c29bfa92872bfd3e62db60405468e29958adecb9c24969c5dda5caa31b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • +49 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/index For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing

🔗 References (7)