RHSA-2022:5531MediumCVSS 8.8

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.1 security updates and bug fixes

Published
July 11, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-24450 →

📋 Description

CVE-2022-24450 — nats-server: misusing the "dynamically provisioned sandbox accounts" feature authenticated user can obtain the privileges of the System account

🎯 Affected products200

  • Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:44f25b1d8b88164e373a640cbc5bf4508a5864df7d1be80fb1db59028bbc6f58_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:70e7ab8b7ab7de5668b91ed21ce24c26ea7b29e5464bf73fd7760392aef1eb2f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:8b0be2c78bfd67b70a4c139e88843bde03aac427e6932aef0d48d1b1e167bb39_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:fae35631e4ec990bbb37731f04143bfa69402a680751ba7aaf83180bad3cef48_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:1dcbc8d095514d4f63faef847db5071d4de7b9b4beb4fa01d6f451cbc721421d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:6dd7c5969dacbcef0657a76d110c65ea1f25a0d63807cd97f7d7c4ee1913541b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:efd3a33902472489ac5e851fc76e01227db341716fb000b8235ca720d0c20062_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:f61ff55d0b46c9afce81a1e600dc239882eace2f1e9d8fd09a5b9f0c07d575c4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:0931784e22ed3883a09f7f38225d6df4c788306bda0cb6328bde77cb4dcb669e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:4551e1148522b174347626b8dc8c43caa966abff6cd70268c6fe6fd676ef6f68_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:7607c349f58b207c6f24e1df3326f3f360d4996914bdc090608b93b96805a470_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:a279a18c383d853b24ba5ff0619627fe9131b93354c03ce7a0a7a075395c82f5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:3774df044599f02269da7eaa9f21441a4018b579d8fdce3ab984416485d245a3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:8b29326bf6527a04e9adad987153441d61ac54fb06f0c7f280744ae872bcb8b0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:ab172285f656a3258bf141b8893a87c3457ff0ba8a7bee8a2e859a3650089140_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:eac9af19d3c2a6717e4d859aca034450b7bfec762e2d86b3c13989ec33ffad74_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:46b02d525ae1b7ab5b447f99e8f4fbb3f67fc0408eac4e4ce2b321e3a55f5cf9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:4d11e4cc5771e853cc2f133f20aa9d4cb2a4e0c735ff11b66b3f262ed74494c2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:5a5eef98adae7a5171ec19b4d0f71f549cfbd0b30e38f1ca240d57fa1e2a6af3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:dc41dd6c6155dc8c4bdcdb5729cfea64d353c54c424f5e0cca21b3535779397a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:544673b22ebabded05c2fdc9d7edf0fa36eddfb2b80d2c8ab631b35ae1a8fe3b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:655bb6e14908af2cfe5ae33f1543ae929f6b33f8b3824e42dce0b0779ecd78a4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:9d4bb953ed63af3cffd0cbcb6e63085e8303ddd0f28c8c02cf91f16b2b87c6fe_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:b781f173bdc4d6183580c0666b0ca1c65208fd2a06178171067dd8fc91b6ca00_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:81a0b67d03e03ca0ab1396142558c2a8d4e0f429a98ef4fabf73e7c45cc75b18_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:93969007d251140b703c8f98d21f89eb1f43e3fae9f294133cbdbc3fd0739788_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:a97c1aa7cfd77fc3fe5ad8584ea8df6b34bf498619e57453f2a95498f5f195ea_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:d812d0b3276848f67ff9f69eff36f4daef01a3116503faacf8430f755c6a68be_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:4b50b7c6746d29158115f6fd55af3798d6697a56e6ceca8fc0f0d5c39305acc8_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • +170 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions on installing this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing

🔗 References (10)