Vulnerability-Lookup

RHSA-2024:6054

Vulnerability from csaf_redhat - Published: 2024-08-29 18:30 - Updated: 2026-04-29 18:10

Summary

Red Hat Security Advisory: ACS 4.4 enhancement and security update

Severity

Important

Notes

Topic: Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes security and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: This release of RHACS 4.4.5 includes security fixes for CVE-2024-37298, CVE-2024-3727 and CVE-2024-6104. If you are using an earlier version of RHACS 4.4, you are advised to upgrade to this patch release 4.4.5. Security issues fixed: * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298) * containers/image: digest type does not guarantee valid type (CVE-2024-3727) * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-354 - Improper Validation of Integrity Check Value

Affected products

Fixed 39 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x	—	Vendor Fix fix
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2024-6104

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.

6.0 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE-532 - Insertion of Sensitive Information into Log File

Affected products

Fixed 39 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-37298

A flaw was found in the gorilla/schema package. Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could trigger memory exhaustion and lead to a denial of service.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 39 products

Product	Version	Remediation
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

22 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:6054	self
https://access.redhat.com/security/updates/classi…	external
https://docs.openshift.com/acs/4.4/release_notes/…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2274767	external
https://bugzilla.redhat.com/show_bug.cgi?id=2294000	external
https://bugzilla.redhat.com/show_bug.cgi?id=2295010	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-3727	self
https://bugzilla.redhat.com/show_bug.cgi?id=2274767	external
https://www.cve.org/CVERecord?id=CVE-2024-3727	external
https://nvd.nist.gov/vuln/detail/CVE-2024-3727	external
https://access.redhat.com/security/cve/CVE-2024-6104	self
https://bugzilla.redhat.com/show_bug.cgi?id=2294000	external
https://www.cve.org/CVERecord?id=CVE-2024-6104	external
https://nvd.nist.gov/vuln/detail/CVE-2024-6104	external
https://access.redhat.com/security/cve/CVE-2024-37298	self
https://bugzilla.redhat.com/show_bug.cgi?id=2295010	external
https://www.cve.org/CVERecord?id=CVE-2024-37298	external
https://nvd.nist.gov/vuln/detail/CVE-2024-37298	external
https://github.com/gorilla/schema/blob/main/decod…	external
https://github.com/gorilla/schema/commit/cd59f2f1…	external
https://github.com/gorilla/schema/security/adviso…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS). The updated image includes security and bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of RHACS 4.4.5 includes security fixes for CVE-2024-37298,\nCVE-2024-3727 and CVE-2024-6104. If you are using an earlier version of RHACS 4.4, you are advised to upgrade to this patch release 4.4.5.\n\nSecurity issues fixed:\n\n* gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:6054",
        "url": "https://access.redhat.com/errata/RHSA-2024:6054"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.openshift.com/acs/4.4/release_notes/44-release-notes.html",
        "url": "https://docs.openshift.com/acs/4.4/release_notes/44-release-notes.html"
      },
      {
        "category": "external",
        "summary": "2274767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
      },
      {
        "category": "external",
        "summary": "2294000",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294000"
      },
      {
        "category": "external",
        "summary": "2295010",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295010"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6054.json"
      }
    ],
    "title": "Red Hat Security Advisory: ACS 4.4 enhancement and security update",
    "tracking": {
      "current_release_date": "2026-04-29T18:10:10+00:00",
      "generator": {
        "date": "2026-04-29T18:10:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.7"
        }
      },
      "id": "RHSA-2024:6054",
      "initial_release_date": "2024-08-29T18:30:41+00:00",
      "revision_history": [
        {
          "date": "2024-08-29T18:30:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-08-29T18:30:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-29T18:10:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHACS 4.4 for RHEL 8",
                "product": {
                  "name": "RHACS 4.4 for RHEL 8",
                  "product_id": "8Base-RHACS-4.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.4.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=4.4.5-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.4.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=4.4.5-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
                  "product_id": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
                  "product_id": "advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
                  "product_id": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-slim-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
                  "product_id": "advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=4.4.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
                  "product_id": "advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
                  "product_id": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
                  "product_id": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=4.4.5-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=4.4.5-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
                "product": {
                  "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
                  "product_id": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=4.4.5-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64 as a component of RHACS 4.4 for RHEL 8",
          "product_id": "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
        },
        "product_reference": "advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64",
        "relates_to_product_reference": "8Base-RHACS-4.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "cwe": {
        "id": "CWE-354",
        "name": "Improper Validation of Integrity Check Value"
      },
      "discovery_date": "2024-04-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2274767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containers/image: digest type does not guarantee valid type",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Some conditions are necessary for this attack to occur, such as the attacker being able to upload malicious images to the registry and persuade a victim to pull them. Hence, the severity of this flaw was rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2274767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-3727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727"
        }
      ],
      "release_date": "2024-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-29T18:30:41+00:00",
          "details": "If you are using an earlier version of\nRHACS 4.4, you are advised to upgrade to this patch release 4.4.5.",
          "product_ids": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6054"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containers/image: digest type does not guarantee valid type"
    },
    {
      "cve": "CVE-2024-6104",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "discovery_date": "2024-06-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2294000"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go-retryablehttp: url might write sensitive information to log file",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-6104"
        },
        {
          "category": "external",
          "summary": "RHBZ#2294000",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294000"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-6104",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-6104"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6104",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6104"
        }
      ],
      "release_date": "2024-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-29T18:30:41+00:00",
          "details": "If you are using an earlier version of\nRHACS 4.4, you are advised to upgrade to this patch release 4.4.5.",
          "product_ids": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6054"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "go-retryablehttp: url might write sensitive information to log file"
    },
    {
      "cve": "CVE-2024-37298",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2024-07-01T19:21:12+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the gorilla/schema package. Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could trigger memory exhaustion and lead to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in the gorilla/schema package is a high-severity issue due to its potential to cause a Denial of Service (DoS) attack through memory exhaustion. The schema.Decoder.Decode() function, when processing a struct with fields of type []struct{...}, is susceptible to malicious input that exploits sparse slice functionality. This can result in excessive memory allocations, overwhelming the system\u0027s resources and rendering the application unresponsive.\n\nThe majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
          "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-37298"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-37298",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-37298"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-37298",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37298"
        },
        {
          "category": "external",
          "summary": "https://github.com/gorilla/schema/blob/main/decoder.go#L223",
          "url": "https://github.com/gorilla/schema/blob/main/decoder.go#L223"
        },
        {
          "category": "external",
          "summary": "https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff",
          "url": "https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff"
        },
        {
          "category": "external",
          "summary": "https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3",
          "url": "https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3"
        }
      ],
      "release_date": "2024-06-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-29T18:30:41+00:00",
          "details": "If you are using an earlier version of\nRHACS 4.4, you are advised to upgrade to this patch release 4.4.5.",
          "product_ids": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6054"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:072eeeb7f1dd12e6f0275948d3b38b52f667e45d1304e6fd2dd28c816571d824_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:d6b9f90cada9f236011bb349e850e80e3fef55f56f434c12c00122b73e42db6f_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-central-db-rhel8@sha256:daa7ddb8a3dc233385926119ca78ffc342d2e6c588960d1814e1639af956b0f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:1f03a7f23c4ffb6adb440d475075a8b11211ddd8acda772d02a904547cb5148c_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:78298521c612192e0177d6cc044a865e97230e962f434d811962064f2db1d5ac_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-rhel8@sha256:8901cfa7be1f709f0bf209c396ad32e2c13c3d112bd05a8d4784535e405e95a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:10e904f11041dd4947254df586f74f03a66d16818c4f073b8cc8d2336175f6a4_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:304406009c9800285cfcc74861de6b3cc230d09438f37426e39d911a69368e34_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a13aab1f8c4294f490284b5f0c73fc77b1ee08b65a3d1cae23aacb5db1687926_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3877057e49d5da93372d239055b6506b23ef430da60d0eca371c4c5a619b1ae6_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:3bdf2ba4bbf3a2373a882cdb85a790b9df2ba359010c8467c4e4e2874996ff4d_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-main-rhel8@sha256:9a11dad9b17cc9c4f13ab85d920ac3b0796221457ca4894fc6578f92b022880e_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:176837c3041894c294b64da0181b8ad3bc53b3538d5ba70868979c57c7ec1644_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:37070fe46f9168b80d72070443fcdc344db8141d599926f65bf5c2b96bcd89a7_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-operator-bundle@sha256:e9cc56d2c29af677277791fdfae7796cc5f43e92772bde4adf1f168ef4aaec80_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0b590586a0bfc3d6399505dfb5ca1367c232d0b13245fd3ab9b0e5ac24a0b5a2_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:0e6a36cbd8ab3d06bc71cf60091aa83a3efd83e7784221aaddaf8b1a0accd018_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-rhel8-operator@sha256:e83e6c58071dd1fbba15944e2d25ecac07dd623d58e2b31cc72a0555aa69e584_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:32364fedba6ad4660e117eae90433b2ab8f6a16afb51ebfe718c356a531d71bd_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:8dd008c09f18916952ef7eafe1382cc151139762aff6cffd86b688e132a0e5f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-roxctl-rhel8@sha256:da206789e59d581483ffbe8e1c63519019f504c792b5ad2d5e9299d12785c675_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:317838698e27cb366ca736975f0cb0bf927533b5526caabe5a9e443d28a70487_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:78012a83f84238eb3d492faf5abee4a9d87ddc0c84f1618b8785f82e5f766211_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:a19cb92c646d2dc709c18e3da494def64786102ef5a038c766c28a5556d1b154_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:1f624ee17785e5f2221e917459f31c81ef23421bf9374cedf9020f139e67854a_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:57b3670126a5a55b51fdc13ffd1deaceb13e508ff474bac3d7495ea614bf64ad_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e0617ff16dc01afccf934a956c4dd3c7fab847d92e520b0d9358bd7bc3fa1582_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:16deab5ea78fbe3d6f4684ef8b4d071dd2408ba46da9f6fc79a9c0af1da16165_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:54c43eb7e2952e6fe64071077a4a22965af01a2e0d4da7ee9249d3c7e31df5a4_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-rhel8@sha256:d09e9eeec5cdcbc7db49814caf033868cbc91273459debfcac94f58151573762_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3894202682fafa2a5bcc7fccd267396f6fa2c4f068f31c2cf99579a1308cde5e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3d6a461c5fe55fd478dc08f5a95c8cd813c5dc56ddbbc40c033697a1b628ca67_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e93ec7ad08b50b54b61ccd9c69205f7b04692cb3a5c452782b92dce42f9ae4e3_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:37f65ec7e152446ef02de2934532db772f534647e91d3909197aeaffe808693e_amd64",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:38ad20bdebc1776686b4bd308c4f4da9b978dac5f679ac594fd88d36dfb019d1_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6f78b7cbdee3e6c08c6ebcdf67dc2c49dd93bba1fa0bcbc42154bbd6bd6b60f3_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:57c71609e72f30089a8f43c1f9b6bab44dc67c28ece0db52460d9f527abac19a_ppc64le",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:dfccbd75027774554b10786ec939458a92c725cdf8226eda1660b6ff137d8e51_s390x",
            "8Base-RHACS-4.4:advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:f9909a0d6d6063f36dd7dd62ed3e5ba5dab6f1f754e627e2dc0726bb124bc1f8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization"
    }
  ]
}

CVE-2024-37298 (GCVE-0-2024-37298)

Vulnerability from cvelistv5 – Published: 2024-07-01 18:27 – Updated: 2024-08-02 03:50

Title

Potential memory exhaustion attack due to sparse slice deserialization

Summary

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory exhaustion vulnerability. Version 1.4.1 contains a patch for the issue.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/gorilla/schema/security/adviso…	x_refsource_CONFIRM
https://github.com/gorilla/schema/commit/cd59f2f1…	x_refsource_MISC
https://github.com/gorilla/schema/blob/main/decod…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
gorilla	schema	Affected: < 1.4.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:gorillatoolkit:schema:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "schema",
            "vendor": "gorillatoolkit",
            "versions": [
              {
                "lessThan": "1.4.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-37298",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-02T14:16:14.834696Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-03T20:58:34.291Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:50:55.675Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3"
          },
          {
            "name": "https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff"
          },
          {
            "name": "https://github.com/gorilla/schema/blob/main/decoder.go#L223",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/gorilla/schema/blob/main/decoder.go#L223"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "schema",
          "vendor": "gorilla",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.4.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory exhaustion vulnerability. Version 1.4.1 contains a patch for the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-01T18:27:33.952Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3"
        },
        {
          "name": "https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff"
        },
        {
          "name": "https://github.com/gorilla/schema/blob/main/decoder.go#L223",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gorilla/schema/blob/main/decoder.go#L223"
        }
      ],
      "source": {
        "advisory": "GHSA-3669-72x9-r9p3",
        "discovery": "UNKNOWN"
      },
      "title": "Potential memory exhaustion attack due to sparse slice deserialization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-37298",
    "datePublished": "2024-07-01T18:27:33.952Z",
    "dateReserved": "2024-06-05T20:10:46.496Z",
    "dateUpdated": "2024-08-02T03:50:55.675Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6104 (GCVE-0-2024-6104)

Vulnerability from cvelistv5 – Published: 2024-06-24 17:06 – Updated: 2024-08-01 21:33

Title

go-retryablehttp can leak basic auth credentials to log files

Summary

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

Severity ?

6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

HashiCorp

References

1 reference

URL	Tags
https://discuss.hashicorp.com/c/security

Impacted products

1 product

Vendor	Product	Version
HashiCorp	Shared library	Affected: 0 , < 0.7.7 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6104",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-24T19:19:22.878144Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-24T19:19:28.773Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:33:04.395Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://discuss.hashicorp.com/c/security"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "64 bit",
            "32 bit",
            "x86",
            "ARM",
            "MacOS",
            "Windows",
            "Linux"
          ],
          "product": "Shared library",
          "repo": "https://github.com/hashicorp/go-retryablehttp",
          "vendor": "HashiCorp",
          "versions": [
            {
              "lessThan": "0.7.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ego-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.\u003c/p\u003e\u003cbr/\u003e"
            }
          ],
          "value": "go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-118",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-118: Collect and Analyze Information"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532: Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-24T17:06:21.150Z",
        "orgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc",
        "shortName": "HashiCorp"
      },
      "references": [
        {
          "url": "https://discuss.hashicorp.com/c/security"
        }
      ],
      "source": {
        "advisory": "HCSEC-2024-12",
        "discovery": "EXTERNAL"
      },
      "title": "go-retryablehttp can leak basic auth credentials to log files"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc",
    "assignerShortName": "HashiCorp",
    "cveId": "CVE-2024-6104",
    "datePublished": "2024-06-24T17:06:21.150Z",
    "dateReserved": "2024-06-17T22:19:58.680Z",
    "dateUpdated": "2024-08-01T21:33:04.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-3727 (GCVE-0-2024-3727)

Vulnerability from cvelistv5 – Published: 2024-05-09 14:57 – Updated: 2026-04-29 18:07

Title

Containers/image: digest type does not guarantee valid type

Summary

Severity ?

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-354 - Improper Validation of Integrity Check Value

Assigner

redhat

References

27 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:0045	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3718	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:4159	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:4613	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:4850	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:4960	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:5258	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:5951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6054	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6122	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6708	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6818	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6824	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:7164	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:7174	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:7182	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:7187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:7922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:7941	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:8260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:8425	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:9097	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:9098	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:9102	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:9960	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-3727	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2274767	issue-trackingx_refsource_REDHAT

Impacted products

168 products

Vendor	Product	Version
		Affected: 0 , < 5.29.3 (semver) Affected: 5.30.0 , < 5.30.1 (semver)
Red Hat	OADP-1.3-RHEL-9	Unaffected: 1.3.4-9 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-4 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-1 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020240808093819.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.37.2-1.el9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.16.1-1.el9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:5.2.2-1.el9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Migration Toolkit for Containers 1.8	Unaffected: v1.8.4-22 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 3:4.4.1-13.rhaos4.13.el8 , < * (rpm) cpe:/a:redhat:openshift:4.13::el8 cpe:/a:redhat:openshift:4.13::el9 cpe:/a:redhat:openshift_ironic:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 2:1.11.3-3.rhaos4.13.el8 , < * (rpm) cpe:/a:redhat:openshift:4.13::el8 cpe:/a:redhat:openshift:4.13::el9 cpe:/a:redhat:openshift_ironic:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 3:4.4.1-19.rhaos4.14.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift:4.14::el9 cpe:/a:redhat:openshift_ironic:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 2:1.11.3-3.rhaos4.14.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift:4.14::el9 cpe:/a:redhat:openshift_ironic:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 415.92.202409162258-0 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 3:4.4.1-30.rhaos4.15.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift_ironic:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 2:1.11.3-4.rhaos4.15.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift_ironic:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202410230304.p0.g366295f.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8 cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 4:4.9.4-5.1.rhaos4.16.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8 cpe:/a:redhat:openshift:4.16::el9 cpe:/a:redhat:openshift_ironic:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 2:1.14.4-1.rhaos4.16.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8 cpe:/a:redhat:openshift:4.16::el9 cpe:/a:redhat:openshift_ironic:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:1.29.5-7.rhaos4.16.git7db4ada.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8 cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202409231504.p0.g342902b.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	RHEL-9-CNV-4.15	Unaffected: v4.15.5-7 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.15::el9
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Source-to-Image (S2I)	cpe:/a:redhat:source_to_image:1
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Ansible Automation Platform 1.2	cpe:/a:redhat:ansible_automation_platform
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 3.11	cpe:/a:redhat:openshift:3.11
Red Hat	Red Hat OpenShift Container Platform 3.11	cpe:/a:redhat:openshift:3.11
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform Assisted Installer 1	cpe:/a:redhat:assisted_installer:1
Red Hat	Red Hat OpenShift Container Platform Assisted Installer 1	cpe:/a:redhat:assisted_installer:1
Red Hat	Red Hat OpenShift Container Platform Assisted Installer 1	cpe:/a:redhat:assisted_installer:1
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat Openshift Sandboxed Containers	cpe:/a:redhat:openshift_sandboxed_containers:1
Red Hat	Red Hat Openshift Sandboxed Containers	cpe:/a:redhat:openshift_sandboxed_containers:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3

Date Public ?

2024-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3727",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-13T17:59:41.318223Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:33:13.046Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:20:01.029Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:0045",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:0045"
          },
          {
            "name": "RHSA-2024:4159",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:4159"
          },
          {
            "name": "RHSA-2024:4613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:4613"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
          },
          {
            "name": "RHBZ#2274767",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/containers/image",
          "defaultStatus": "unaffected",
          "packageName": "image",
          "versions": [
            {
              "lessThan": "5.29.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.30.1",
              "status": "affected",
              "version": "5.30.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "oadp/oadp-velero-plugin-rhel9",
          "product": "OADP-1.3-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.3.4-9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-collector-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-collector-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-operator-bundle",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.5-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-collector-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-collector-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-operator-bundle",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.2-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "container-tools:rhel8",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8100020240808093819.afee755d",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "buildah",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:1.37.2-1.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:1.16.1-1.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "podman",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:5.2.2-1.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhmt:1.8::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhmtc/openshift-migration-controller-rhel8",
          "product": "Red Hat Migration Toolkit for Containers 1.8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.8.4-22",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el8",
            "cpe:/a:redhat:openshift:4.13::el9",
            "cpe:/a:redhat:openshift_ironic:4.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "podman",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3:4.4.1-13.rhaos4.13.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el8",
            "cpe:/a:redhat:openshift:4.13::el9",
            "cpe:/a:redhat:openshift_ironic:4.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:1.11.3-3.rhaos4.13.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el8",
            "cpe:/a:redhat:openshift:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-lifecycle-manager",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el8",
            "cpe:/a:redhat:openshift:4.14::el9",
            "cpe:/a:redhat:openshift_ironic:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "podman",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3:4.4.1-19.rhaos4.14.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el8",
            "cpe:/a:redhat:openshift:4.14::el9",
            "cpe:/a:redhat:openshift_ironic:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:1.11.3-3.rhaos4.14.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/network-tools-rhel8",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-api-server-rhel8",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-alibaba-machine-controllers-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-apiserver-network-proxy-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cluster-autoscaler-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cluster-control-plane-machine-set-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cluster-ingress-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cluster-network-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-console",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-docker-builder",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-hypershift-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-insights-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-machine-api-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-multus-admission-controller-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-multus-whereabouts-ipam-cni-rhel8",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-nutanix-machine-controllers-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-openshift-controller-manager-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-registry-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-powervs-cloud-controller-manager-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-powervs-machine-controllers-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-sdn-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-tests",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-tools-rhel8",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "415.92.202409162258-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9",
            "cpe:/a:redhat:openshift_ironic:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "podman",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3:4.4.1-30.rhaos4.15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9",
            "cpe:/a:redhat:openshift_ironic:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:1.11.3-4.rhaos4.15.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202410230304.p0.g366295f.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-orchestrator-rhel8",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el8",
            "cpe:/a:redhat:openshift:4.16::el9",
            "cpe:/a:redhat:openshift_ironic:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "podman",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4:4.9.4-5.1.rhaos4.16.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el8",
            "cpe:/a:redhat:openshift:4.16::el9",
            "cpe:/a:redhat:openshift_ironic:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "skopeo",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:1.14.4-1.rhaos4.16.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el8",
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "cri-o",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.29.5-7.rhaos4.16.git7db4ada.el8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.0-202407171536.p0.g1551101.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-machine-config-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.0-202409231504.p0.g342902b.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-machine-config-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-olm-operator-controller-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-operator-registry-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/oc-mirror-plugin-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-api-server-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-machine-config-rhel9-operator",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-openshift-apiserver-rhel9",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-controller-rhel9",
          "product": "RHEL-9-CNV-4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.5-7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "unaffected",
          "packageName": "multicluster-engine/agent-service-rhel8",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "unaffected",
          "packageName": "multicluster-engine/assisted-installer-agent-rhel8",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "unaffected",
          "packageName": "multicluster-engine/assisted-installer-reporter-rhel8",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "unaffected",
          "packageName": "multicluster-engine/assisted-installer-rhel8",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "unaffected",
          "packageName": "multicluster-engine/hive-rhel8",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ocp_tools"
          ],
          "defaultStatus": "affected",
          "packageName": "ocp-tools-4/jenkins-agent-base-rhel8",
          "product": "OpenShift Developer Tools and Services",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ocp_tools"
          ],
          "defaultStatus": "affected",
          "packageName": "ocp-tools-4/jenkins-rhel8",
          "product": "OpenShift Developer Tools and Services",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:serverless:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/client-kn-rhel8",
          "product": "OpenShift Serverless",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:serverless:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-clients",
          "product": "OpenShift Serverless",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:source_to_image:1"
          ],
          "defaultStatus": "affected",
          "packageName": "source-to-image-container",
          "product": "OpenShift Source-to-Image (S2I)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhacm2/submariner-rhel8-operator",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:3"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
          "product": "Red Hat Advanced Cluster Security 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift-clients",
          "product": "Red Hat Ansible Automation Platform 1.2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift-clients",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "buildah",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "conmon",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "containers-common",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "osbuild-composer",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "podman",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "skopeo",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "buildah",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "podman",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "skopeo",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "container-tools:4.0/buildah",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "container-tools:4.0/conmon",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "container-tools:4.0/containers-common",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "container-tools:4.0/podman",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "container-tools:4.0/skopeo",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "osbuild-composer",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "conmon",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "containers-common",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "osbuild-composer",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:3.11"
          ],
          "defaultStatus": "unknown",
          "packageName": "atomic-openshift",
          "product": "Red Hat OpenShift Container Platform 3.11",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:3.11"
          ],
          "defaultStatus": "unknown",
          "packageName": "podman",
          "product": "Red Hat OpenShift Container Platform 3.11",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "buildah",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "conmon",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "containers-common",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-baremetal-installer-rhel8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cli",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-cli-artifacts",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-deployer",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-installer",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-installer-altinfra-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-installer-artifacts-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift4/ose-olm-rukpak-rhel8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-openshift-proxy-pull-test-rhel8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-clients",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "ose-installer-terraform-providers-container",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:assisted_installer:1"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai-tech-preview/assisted-installer-agent-rhel8",
          "product": "Red Hat OpenShift Container Platform Assisted Installer 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:assisted_installer:1"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai-tech-preview/assisted-installer-reporter-rhel8",
          "product": "Red Hat OpenShift Container Platform Assisted Installer 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:assisted_installer:1"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai-tech-preview/assisted-installer-rhel8",
          "product": "Red Hat OpenShift Container Platform Assisted Installer 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/udi-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_sandboxed_containers:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-must-gather-rhel8",
          "product": "Red Hat Openshift Sandboxed Containers",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_sandboxed_containers:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-rhel9-operator",
          "product": "Red Hat Openshift Sandboxed Containers",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-apiserver",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-apiserver-rhel9",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-cloner",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-cloner-rhel9",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-controller",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-importer",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-importer-rhel9",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-operator",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-operator-rhel9",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-uploadproxy",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-uploadserver",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "packageName": "container-native-virtualization/virt-cdi-uploadserver-rhel9",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openstack:16.2"
          ],
          "defaultStatus": "affected",
          "packageName": "osp-director-provisioner-container",
          "product": "Red Hat OpenStack Platform 16.2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:quay:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "quay/quay-builder-rhel8",
          "product": "Red Hat Quay 3",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-29T18:07:23.359Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:0045",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:0045"
        },
        {
          "name": "RHSA-2024:3718",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:3718"
        },
        {
          "name": "RHSA-2024:4159",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:4159"
        },
        {
          "name": "RHSA-2024:4613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:4613"
        },
        {
          "name": "RHSA-2024:4850",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:4850"
        },
        {
          "name": "RHSA-2024:4960",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:4960"
        },
        {
          "name": "RHSA-2024:5258",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:5258"
        },
        {
          "name": "RHSA-2024:5951",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:5951"
        },
        {
          "name": "RHSA-2024:6054",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:6054"
        },
        {
          "name": "RHSA-2024:6122",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:6122"
        },
        {
          "name": "RHSA-2024:6708",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:6708"
        },
        {
          "name": "RHSA-2024:6818",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:6818"
        },
        {
          "name": "RHSA-2024:6824",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:6824"
        },
        {
          "name": "RHSA-2024:7164",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:7164"
        },
        {
          "name": "RHSA-2024:7174",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:7174"
        },
        {
          "name": "RHSA-2024:7182",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:7182"
        },
        {
          "name": "RHSA-2024:7187",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:7187"
        },
        {
          "name": "RHSA-2024:7922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:7922"
        },
        {
          "name": "RHSA-2024:7941",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:7941"
        },
        {
          "name": "RHSA-2024:8260",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:8260"
        },
        {
          "name": "RHSA-2024:8425",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:8425"
        },
        {
          "name": "RHSA-2024:9097",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9097"
        },
        {
          "name": "RHSA-2024:9098",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9098"
        },
        {
          "name": "RHSA-2024:9102",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9102"
        },
        {
          "name": "RHSA-2024:9960",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9960"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
        },
        {
          "name": "RHBZ#2274767",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-04-12T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-05-09T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Containers/image: digest type does not guarantee valid type",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-354: Improper Validation of Integrity Check Value"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-3727",
    "datePublished": "2024-05-09T14:57:21.327Z",
    "dateReserved": "2024-04-12T17:56:37.261Z",
    "dateUpdated": "2026-04-29T18:07:23.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2024:6054

CVE-2024-37298 (GCVE-0-2024-37298)

CVE-2024-6104 (GCVE-0-2024-6104)

CVE-2024-3727 (GCVE-0-2024-3727)

Tags

Sightings

Nomenclature