RHSA-2022:7055MediumCVSS 9.8
Red Hat Security Advisory: RHOSDT 2.6.0 operator/operand containers Security Update
🔗 CVE IDs covered (5)
📋 Description
CVE-2021-3918 — nodejs-json-schema: Prototype pollution vulnerability CVE-2022-0536 — follow-redirects: Exposure of Sensitive Information via Authorization Header leak CVE-2022-1650 — eventsource: Exposure of Sensitive Information CVE-2022-24785 — Moment.js: Path traversal in moment.locale CVE-2022-31129 — moment: inefficient parsing algorithm resulting in DoS
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2022:7055
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2024702
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2053259
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2072009
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2085307
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2105075
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7055.json