csaf_opensuse - opensuse-su-2025:14728-1

Vulnerability from csaf_opensuse

Published

2025-02-04 00:00

Modified

2025-02-04 00:00

Summary

govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media

Notes

Title of the patch

govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media

Description of the patch

These are all security issues fixed in the govulncheck-vulndb-0.0.20250130T185858-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2025-14728

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "These are all security issues fixed in the govulncheck-vulndb-0.0.20250130T185858-1.1 package on the GA media of openSUSE Tumbleweed.",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-Tumbleweed-2025-14728",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14728-1.json",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-10846 page",
            url: "https://www.suse.com/security/cve/CVE-2024-10846/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-13484 page",
            url: "https://www.suse.com/security/cve/CVE-2024-13484/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-3727 page",
            url: "https://www.suse.com/security/cve/CVE-2024-3727/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-0750 page",
            url: "https://www.suse.com/security/cve/CVE-2025-0750/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-24369 page",
            url: "https://www.suse.com/security/cve/CVE-2025-24369/",
         },
      ],
      title: "govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media",
      tracking: {
         current_release_date: "2025-02-04T00:00:00Z",
         generator: {
            date: "2025-02-04T00:00:00Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2025:14728-1",
         initial_release_date: "2025-02-04T00:00:00Z",
         revision_history: [
            {
               date: "2025-02-04T00:00:00Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                        product: {
                           name: "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                           product_id: "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                        product: {
                           name: "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                           product_id: "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                        product: {
                           name: "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                           product_id: "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
                        product: {
                           name: "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
                           product_id: "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Tumbleweed",
                        product: {
                           name: "openSUSE Tumbleweed",
                           product_id: "openSUSE Tumbleweed",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:tumbleweed",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            },
            product_reference: "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            },
            product_reference: "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            },
            product_reference: "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            },
            product_reference: "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-10846",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-10846",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles while parsing YAML, such as used by Docker Compose from versions  v2.27.0 to v2.29.7 included",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-10846",
               url: "https://www.suse.com/security/cve/CVE-2024-10846",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236335 for CVE-2024-10846",
               url: "https://bugzilla.suse.com/1236335",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-02-04T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-10846",
      },
      {
         cve: "CVE-2024-13484",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-13484",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-13484",
               url: "https://www.suse.com/security/cve/CVE-2024-13484",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-02-04T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2024-13484",
      },
      {
         cve: "CVE-2024-3727",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-3727",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-3727",
               url: "https://www.suse.com/security/cve/CVE-2024-3727",
            },
            {
               category: "external",
               summary: "SUSE Bug 1224112 for CVE-2024-3727",
               url: "https://bugzilla.suse.com/1224112",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-02-04T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2024-3727",
      },
      {
         cve: "CVE-2025-0750",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-0750",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-0750",
               url: "https://www.suse.com/security/cve/CVE-2025-0750",
            },
            {
               category: "external",
               summary: "SUSE Bug 1236479 for CVE-2025-0750",
               url: "https://bugzilla.suse.com/1236479",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-02-04T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-0750",
      },
      {
         cve: "CVE-2025-24369",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-24369",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce (such as 42069), and then passes the challenge with difficulty zero. Commit e09d0226a628f04b1d80fd83bee777894a45cd02 fixes this behavior by not using a client-specified difficulty value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
               "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-24369",
               url: "https://www.suse.com/security/cve/CVE-2025-24369",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-02-04T00:00:00Z",
               details: "low",
            },
         ],
         title: "CVE-2025-24369",
      },
   ],
}

cve-2025-24369

Vulnerability from cvelistv5

Published

2025-01-27 22:57

Modified

2025-01-28 15:18

Severity ?

2.3 (Low) - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Summary

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce (such as 42069), and then passes the challenge with difficulty zero. Commit e09d0226a628f04b1d80fd83bee777894a45cd02 fixes this behavior by not using a client-specified difficulty value.

References

▼	URL	Tags
	https://github.com/Xe/x/security/advisories/GHSA-56w8-8ppj-2p4f	x_refsource_CONFIRM
	https://github.com/Xe/x/commit/7bd7b209f4f1b897de85ec8973458dc8be606a8b	x_refsource_MISC
	https://github.com/Xe/x/commit/e09d0226a628f04b1d80fd83bee777894a45cd02	x_refsource_MISC
	https://xeiaso.net/notes/2025/GHSA-56w8-8ppj-2p4f	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Xe	x	Version: < v1.11.0-37-gd98d70a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24369",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-28T14:59:28.984137Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-28T15:18:44.746Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "x",
               vendor: "Xe",
               versions: [
                  {
                     status: "affected",
                     version: "< v1.11.0-37-gd98d70a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce (such as 42069), and then passes the challenge with difficulty zero. Commit e09d0226a628f04b1d80fd83bee777894a45cd02 fixes this behavior by not using a client-specified difficulty value.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "HIGH",
                  attackRequirements: "NONE",
                  attackVector: "NETWORK",
                  baseScore: 2.3,
                  baseSeverity: "LOW",
                  privilegesRequired: "LOW",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "NONE",
                  vulnConfidentialityImpact: "LOW",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-807",
                     description: "CWE-807: Reliance on Untrusted Inputs in a Security Decision",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-27T22:57:26.728Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://github.com/Xe/x/security/advisories/GHSA-56w8-8ppj-2p4f",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/Xe/x/security/advisories/GHSA-56w8-8ppj-2p4f",
            },
            {
               name: "https://github.com/Xe/x/commit/7bd7b209f4f1b897de85ec8973458dc8be606a8b",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Xe/x/commit/7bd7b209f4f1b897de85ec8973458dc8be606a8b",
            },
            {
               name: "https://github.com/Xe/x/commit/e09d0226a628f04b1d80fd83bee777894a45cd02",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Xe/x/commit/e09d0226a628f04b1d80fd83bee777894a45cd02",
            },
            {
               name: "https://xeiaso.net/notes/2025/GHSA-56w8-8ppj-2p4f",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://xeiaso.net/notes/2025/GHSA-56w8-8ppj-2p4f",
            },
         ],
         source: {
            advisory: "GHSA-56w8-8ppj-2p4f",
            discovery: "UNKNOWN",
         },
         title: "Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2025-24369",
      datePublished: "2025-01-27T22:57:26.728Z",
      dateReserved: "2025-01-20T15:18:26.991Z",
      dateUpdated: "2025-01-28T15:18:44.746Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-10846

Vulnerability from cvelistv5

Published

2025-01-23 15:22

Modified

2025-02-12 17:05

Severity ?

5.9 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

Summary

The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles while parsing YAML, such as used by Docker Compose from versions v2.27.0 to v2.29.7 included

References

▼	URL	Tags
	https://github.com/compose-spec/compose-go/security/advisories/GHSA-36gq-35j3-p9r9

Impacted products

	Vendor	Product	Version
	compose-spec	compose-go	Version: 0 ≤ 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-10846",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-12T17:05:09.753736Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-12T17:05:14.108Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://github.com/compose-spec/compose-go",
               defaultStatus: "unaffected",
               packageName: "compose-go",
               product: "compose-go",
               vendor: "compose-spec",
               versions: [
                  {
                     lessThanOrEqual: "2.4.0",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
               ],
            },
         ],
         datePublic: "2025-01-21T13:32:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "The <code>compose-go</code> library component in versions <code>v2.10-v2.4.0</code> allows an authorized user who sends malicious YAML payloads to cause the <code>compose-go</code> to consume excessive amount of Memory and CPU cycles while parsing YAML, such as used by Docker Compose from versions <code> v2.27.0</code> to <code>v2.29.7</code> included",
                  },
               ],
               value: "The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles while parsing YAML, such as used by Docker Compose from versions  v2.27.0 to v2.29.7 included",
            },
         ],
         impacts: [
            {
               capecId: "CAPEC-130",
               descriptions: [
                  {
                     lang: "en",
                     value: "CAPEC-130 Excessive Allocation",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20 Improper Input Validation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-23T15:22:56.170Z",
            orgId: "686469e6-3ff6-451b-ab8b-cf5b9e89401e",
            shortName: "Docker",
         },
         references: [
            {
               url: "https://github.com/compose-spec/compose-go/security/advisories/GHSA-36gq-35j3-p9r9",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "686469e6-3ff6-451b-ab8b-cf5b9e89401e",
      assignerShortName: "Docker",
      cveId: "CVE-2024-10846",
      datePublished: "2025-01-23T15:22:56.170Z",
      dateReserved: "2024-11-05T10:21:55.528Z",
      dateUpdated: "2025-02-12T17:05:14.108Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0750

Vulnerability from cvelistv5

Published

2025-01-28 09:29

Modified

2025-03-15 07:49

Severity ?

6.6 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Summary

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2025:1122	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2025-0750	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2339405	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Version: 0 ≤

	Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:1.30.10-3.rhaos4.17.gitd088fcf.el9 < * cpe:/a:redhat:openshift:4.17::el8 cpe:/a:redhat:openshift:4.17::el9
	Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-0750",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-28T14:36:21.846521Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-28T14:36:30.599Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://github.com/cri-o/cri-o",
               defaultStatus: "unaffected",
               packageName: "cri-o",
               versions: [
                  {
                     lessThan: "1.33.1",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.17::el8",
                  "cpe:/a:redhat:openshift:4.17::el9",
               ],
               defaultStatus: "affected",
               packageName: "cri-o",
               product: "Red Hat OpenShift Container Platform 4.17",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:1.30.10-3.rhaos4.17.gitd088fcf.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "rhcos",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Red Hat would like to thank Dongha Kim for reporting this issue.",
            },
         ],
         datePublic: "2025-01-22T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-22",
                     description: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-15T07:49:19.161Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2025:1122",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2025:1122",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2025-0750",
            },
            {
               name: "RHBZ#2339405",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2339405",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2025-01-22T05:30:33.616000+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2025-01-22T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting",
         x_redhatCweChain: "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2025-0750",
      datePublished: "2025-01-28T09:29:30.831Z",
      dateReserved: "2025-01-27T13:53:22.286Z",
      dateUpdated: "2025-03-15T07:49:19.161Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-3727

Vulnerability from cvelistv5

Published

2024-05-09 14:57

Modified

2025-03-20 11:51

Severity ?

8.3 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Summary

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2024:0045	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3718	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4159	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4613	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4850	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:4960	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:5258	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:5951	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:6054	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:6122	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:6708	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:6818	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:6824	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7164	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7174	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7182	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7187	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7922	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:7941	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:8260	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:8425	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9097	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9098	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9102	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9960	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-3727	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2274767	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Version: 0 ≤
Version: 5.30.0 ≤

Red Hat	OADP-1.3-RHEL-9	Unaffected: 1.3.4-9 < * cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-4 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-2 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.5-3 < * cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-1 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.2-2 < * cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020240808093819.afee755d < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.37.2-1.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.16.1-1.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:5.2.2-1.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Migration Toolkit for Containers 1.8	Unaffected: v1.8.4-22 < * cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 3:4.4.1-13.rhaos4.13.el8 < * cpe:/a:redhat:openshift:4.13::el9 cpe:/a:redhat:openshift_ironic:4.13::el9 cpe:/a:redhat:openshift:4.13::el8
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 2:1.11.3-3.rhaos4.13.el8 < * cpe:/a:redhat:openshift:4.13::el9 cpe:/a:redhat:openshift_ironic:4.13::el9 cpe:/a:redhat:openshift:4.13::el8
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 3:4.4.1-19.rhaos4.14.el9 < * cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift_ironic:4.14::el9 cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 2:1.11.3-3.rhaos4.14.el8 < * cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift_ironic:4.14::el9 cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 415.92.202409162258-0 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 3:4.4.1-30.rhaos4.15.el8 < * cpe:/a:redhat:openshift_ironic:4.15::el9 cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 2:1.11.3-4.rhaos4.15.el9 < * cpe:/a:redhat:openshift_ironic:4.15::el9 cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202410230304.p0.g366295f.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.15::el9 cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 4:4.9.4-5.1.rhaos4.16.el8 < * cpe:/a:redhat:openshift_ironic:4.16::el9 cpe:/a:redhat:openshift:4.16::el9 cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 2:1.14.4-1.rhaos4.16.el8 < * cpe:/a:redhat:openshift_ironic:4.16::el9 cpe:/a:redhat:openshift:4.16::el9 cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:1.29.5-7.rhaos4.16.git7db4ada.el8 < * cpe:/a:redhat:openshift:4.16::el9 cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202409231504.p0.g342902b.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 < * cpe:/a:redhat:openshift:4.18::el9
Red Hat	RHEL-9-CNV-4.15	Unaffected: v4.15.5-7 < * cpe:/a:redhat:container_native_virtualization:4.15::el9
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Source-to-Image (S2I)	cpe:/a:redhat:source_to_image:1
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Advanced Cluster Security 3	cpe:/a:redhat:advanced_cluster_security:3
Red Hat	Red Hat Ansible Automation Platform 1.2	cpe:/a:redhat:ansible_automation_platform
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 3.11	cpe:/a:redhat:openshift:3.11
Red Hat	Red Hat OpenShift Container Platform 3.11	cpe:/a:redhat:openshift:3.11
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Container Platform Assisted Installer	cpe:/a:redhat:assisted_installer:
Red Hat	Red Hat OpenShift Container Platform Assisted Installer	cpe:/a:redhat:assisted_installer:
Red Hat	Red Hat OpenShift Container Platform Assisted Installer	cpe:/a:redhat:assisted_installer:
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3:
Red Hat	Red Hat Openshift Sandboxed Containers	cpe:/a:redhat:openshift_sandboxed_containers:1
Red Hat	Red Hat Openshift Sandboxed Containers	cpe:/a:redhat:openshift_sandboxed_containers:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-3727",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-13T17:59:41.318223Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:33:13.046Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T20:20:01.029Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2024:0045",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:0045",
               },
               {
                  name: "RHSA-2024:4159",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4159",
               },
               {
                  name: "RHSA-2024:4613",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:4613",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2024-3727",
               },
               {
                  name: "RHBZ#2274767",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2274767",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://github.com/containers/image",
               defaultStatus: "unaffected",
               packageName: "image",
               versions: [
                  {
                     lessThan: "5.29.3",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "5.30.1",
                     status: "affected",
                     version: "5.30.0",
                     versionType: "semver",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift_api_data_protection:1.3::el9",
               ],
               defaultStatus: "affected",
               packageName: "oadp/oadp-velero-plugin-rhel9",
               product: "OADP-1.3-RHEL-9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1.3.4-9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-central-db-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-collector-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-collector-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-main-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-4",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-operator-bundle",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-3",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-rhel8-operator",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-roxctl-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-db-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-3",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-3",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-v4-rhel8",
               product: "Red Hat Advanced Cluster Security 4.4",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.4.5-3",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-central-db-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-collector-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-collector-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-main-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-operator-bundle",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-rhel8-operator",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-roxctl-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-db-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-1",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:4.5::el8",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-v4-rhel8",
               product: "Red Hat Advanced Cluster Security 4.5",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4.5.2-2",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "container-tools:rhel8",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "8100020240808093819.afee755d",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "buildah",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:1.37.2-1.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "skopeo",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:1.16.1-1.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "podman",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:5.2.2-1.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:rhmt:1.8::el8",
               ],
               defaultStatus: "affected",
               packageName: "rhmtc/openshift-migration-controller-rhel8",
               product: "Red Hat Migration Toolkit for Containers 1.8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v1.8.4-22",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.13::el9",
                  "cpe:/a:redhat:openshift_ironic:4.13::el9",
                  "cpe:/a:redhat:openshift:4.13::el8",
               ],
               defaultStatus: "affected",
               packageName: "podman",
               product: "Red Hat OpenShift Container Platform 4.13",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "3:4.4.1-13.rhaos4.13.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.13::el9",
                  "cpe:/a:redhat:openshift_ironic:4.13::el9",
                  "cpe:/a:redhat:openshift:4.13::el8",
               ],
               defaultStatus: "affected",
               packageName: "skopeo",
               product: "Red Hat OpenShift Container Platform 4.13",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:1.11.3-3.rhaos4.13.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.14::el8",
                  "cpe:/a:redhat:openshift:4.14::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-lifecycle-manager",
               product: "Red Hat OpenShift Container Platform 4.14",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.14::el8",
                  "cpe:/a:redhat:openshift_ironic:4.14::el9",
                  "cpe:/a:redhat:openshift:4.14::el9",
               ],
               defaultStatus: "affected",
               packageName: "podman",
               product: "Red Hat OpenShift Container Platform 4.14",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "3:4.4.1-19.rhaos4.14.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.14::el8",
                  "cpe:/a:redhat:openshift_ironic:4.14::el9",
                  "cpe:/a:redhat:openshift:4.14::el9",
               ],
               defaultStatus: "affected",
               packageName: "skopeo",
               product: "Red Hat OpenShift Container Platform 4.14",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:1.11.3-3.rhaos4.14.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/network-tools-rhel8",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-api-server-rhel8",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-node-agent-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-alibaba-machine-controllers-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-apiserver-network-proxy-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cluster-autoscaler-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cluster-control-plane-machine-set-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cluster-ingress-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cluster-network-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cluster-node-tuning-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-console",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-docker-builder",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-hypershift-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-insights-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-machine-api-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-multus-admission-controller-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-multus-whereabouts-ipam-cni-rhel8",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-nutanix-machine-controllers-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-openshift-controller-manager-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-lifecycle-manager-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-registry-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-ovn-kubernetes-microshift-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-ovn-kubernetes-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-powervs-cloud-controller-manager-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-powervs-machine-controllers-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-sdn-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-tests",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-tools-rhel8",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "rhcos",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "415.92.202409162258-0",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_ironic:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "podman",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "3:4.4.1-30.rhaos4.15.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_ironic:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "skopeo",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:1.11.3-4.rhaos4.15.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-node-agent-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202410230304.p0.g366295f.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-orchestrator-rhel8",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.15::el9",
                  "cpe:/a:redhat:openshift:4.15::el8",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-lifecycle-manager-rhel9",
               product: "Red Hat OpenShift Container Platform 4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_ironic:4.16::el9",
                  "cpe:/a:redhat:openshift:4.16::el9",
                  "cpe:/a:redhat:openshift:4.16::el8",
               ],
               defaultStatus: "affected",
               packageName: "podman",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "4:4.9.4-5.1.rhaos4.16.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_ironic:4.16::el9",
                  "cpe:/a:redhat:openshift:4.16::el9",
                  "cpe:/a:redhat:openshift:4.16::el8",
               ],
               defaultStatus: "affected",
               packageName: "skopeo",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "2:1.14.4-1.rhaos4.16.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.16::el9",
                  "cpe:/a:redhat:openshift:4.16::el8",
               ],
               defaultStatus: "affected",
               packageName: "cri-o",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:1.29.5-7.rhaos4.16.git7db4ada.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.16::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-lifecycle-manager-rhel9",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.16.0-202407171536.p0.g1551101.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.16::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-machine-config-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.16::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-orchestrator-rhel9",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.16.0-202409231504.p0.g342902b.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.16::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-node-agent-rhel9",
               product: "Red Hat OpenShift Container Platform 4.16",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.17::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-machine-config-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.17",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.17::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-olm-operator-controller-rhel9",
               product: "Red Hat OpenShift Container Platform 4.17",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.17::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-lifecycle-manager-rhel9",
               product: "Red Hat OpenShift Container Platform 4.17",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.17::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-operator-registry-rhel9",
               product: "Red Hat OpenShift Container Platform 4.17",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.17::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-orchestrator-rhel9",
               product: "Red Hat OpenShift Container Platform 4.17",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.18::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/oc-mirror-plugin-rhel9",
               product: "Red Hat OpenShift Container Platform 4.18",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.18::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-api-server-rhel9",
               product: "Red Hat OpenShift Container Platform 4.18",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.18::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-node-agent-rhel9",
               product: "Red Hat OpenShift Container Platform 4.18",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.18::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-orchestrator-rhel9",
               product: "Red Hat OpenShift Container Platform 4.18",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.18::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-machine-config-rhel9-operator",
               product: "Red Hat OpenShift Container Platform 4.18",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4.18::el9",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-openshift-apiserver-rhel9",
               product: "Red Hat OpenShift Container Platform 4.18",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4.15::el9",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-controller-rhel9",
               product: "RHEL-9-CNV-4.15",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "v4.15.5-7",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:multicluster_engine",
               ],
               defaultStatus: "unaffected",
               packageName: "multicluster-engine/agent-service-rhel8",
               product: "Multicluster Engine for Kubernetes",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:multicluster_engine",
               ],
               defaultStatus: "unaffected",
               packageName: "multicluster-engine/assisted-installer-agent-rhel8",
               product: "Multicluster Engine for Kubernetes",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:multicluster_engine",
               ],
               defaultStatus: "unaffected",
               packageName: "multicluster-engine/assisted-installer-reporter-rhel8",
               product: "Multicluster Engine for Kubernetes",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:multicluster_engine",
               ],
               defaultStatus: "unaffected",
               packageName: "multicluster-engine/assisted-installer-rhel8",
               product: "Multicluster Engine for Kubernetes",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:multicluster_engine",
               ],
               defaultStatus: "unaffected",
               packageName: "multicluster-engine/hive-rhel8",
               product: "Multicluster Engine for Kubernetes",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ocp_tools",
               ],
               defaultStatus: "affected",
               packageName: "ocp-tools-4/jenkins-agent-base-rhel8",
               product: "OpenShift Developer Tools and Services",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ocp_tools",
               ],
               defaultStatus: "affected",
               packageName: "ocp-tools-4/jenkins-rhel8",
               product: "OpenShift Developer Tools and Services",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:serverless:1",
               ],
               defaultStatus: "affected",
               packageName: "openshift-serverless-1/client-kn-rhel8",
               product: "OpenShift Serverless",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:serverless:1",
               ],
               defaultStatus: "affected",
               packageName: "openshift-serverless-clients",
               product: "OpenShift Serverless",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:source_to_image:1",
               ],
               defaultStatus: "affected",
               packageName: "source-to-image-container",
               product: "OpenShift Source-to-Image (S2I)",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:acm:2",
               ],
               defaultStatus: "unaffected",
               packageName: "rhacm2/submariner-rhel8-operator",
               product: "Red Hat Advanced Cluster Management for Kubernetes 2",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-central-db-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-main-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-rhel8-operator",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-roxctl-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-db-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "unaffected",
               packageName: "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:advanced_cluster_security:3",
               ],
               defaultStatus: "affected",
               packageName: "advanced-cluster-security/rhacs-scanner-slim-rhel8",
               product: "Red Hat Advanced Cluster Security 3",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift-clients",
               product: "Red Hat Ansible Automation Platform 1.2",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift-clients",
               product: "Red Hat Ansible Automation Platform 2",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "buildah",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "podman",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:7",
               ],
               defaultStatus: "unknown",
               packageName: "skopeo",
               product: "Red Hat Enterprise Linux 7",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "unaffected",
               packageName: "container-tools:4.0/buildah",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "unaffected",
               packageName: "container-tools:4.0/conmon",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "unaffected",
               packageName: "container-tools:4.0/containers-common",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "container-tools:4.0/podman",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "unaffected",
               packageName: "container-tools:4.0/skopeo",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:8",
               ],
               defaultStatus: "affected",
               packageName: "osbuild-composer",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "unaffected",
               packageName: "conmon",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "unaffected",
               packageName: "containers-common",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/o:redhat:enterprise_linux:9",
               ],
               defaultStatus: "affected",
               packageName: "osbuild-composer",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:3.11",
               ],
               defaultStatus: "unknown",
               packageName: "atomic-openshift",
               product: "Red Hat OpenShift Container Platform 3.11",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:3.11",
               ],
               defaultStatus: "unknown",
               packageName: "podman",
               product: "Red Hat OpenShift Container Platform 3.11",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "buildah",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "conmon",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "containers-common",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-agent-installer-csr-approver-rhel8",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift4/ose-baremetal-installer-rhel8",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cli",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-cli-artifacts",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-deployer",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-installer",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift4/ose-installer-altinfra-rhel8",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift4/ose-installer-artifacts",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift4/ose-olm-rukpak-rhel8",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift4/ose-openshift-proxy-pull-test-rhel8",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "affected",
               packageName: "openshift-clients",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openshift:4",
               ],
               defaultStatus: "unaffected",
               packageName: "ose-installer-terraform-providers-container",
               product: "Red Hat OpenShift Container Platform 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:assisted_installer:",
               ],
               defaultStatus: "affected",
               packageName: "rhai-tech-preview/assisted-installer-agent-rhel8",
               product: "Red Hat OpenShift Container Platform Assisted Installer",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:assisted_installer:",
               ],
               defaultStatus: "affected",
               packageName: "rhai-tech-preview/assisted-installer-reporter-rhel8",
               product: "Red Hat OpenShift Container Platform Assisted Installer",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:assisted_installer:",
               ],
               defaultStatus: "affected",
               packageName: "rhai-tech-preview/assisted-installer-rhel8",
               product: "Red Hat OpenShift Container Platform Assisted Installer",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_devspaces:3:",
               ],
               defaultStatus: "affected",
               packageName: "devspaces/udi-rhel8",
               product: "Red Hat OpenShift Dev Spaces",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_sandboxed_containers:1",
               ],
               defaultStatus: "affected",
               packageName: "openshift-sandboxed-containers/osc-must-gather-rhel8",
               product: "Red Hat Openshift Sandboxed Containers",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_sandboxed_containers:1",
               ],
               defaultStatus: "affected",
               packageName: "openshift-sandboxed-containers/osc-rhel8-operator",
               product: "Red Hat Openshift Sandboxed Containers",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-apiserver",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-apiserver-rhel9",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-cloner",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-cloner-rhel9",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-controller",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-importer",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-importer-rhel9",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-operator",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-operator-rhel9",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-uploadproxy",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-uploadserver",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:container_native_virtualization:4",
               ],
               defaultStatus: "affected",
               packageName: "container-native-virtualization/virt-cdi-uploadserver-rhel9",
               product: "Red Hat OpenShift Virtualization 4",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://catalog.redhat.com/software/containers/",
               cpes: [
                  "cpe:/a:redhat:openstack:16.2",
               ],
               defaultStatus: "affected",
               packageName: "osp-director-provisioner-container",
               product: "Red Hat OpenStack Platform 16.2",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:quay:3",
               ],
               defaultStatus: "affected",
               packageName: "quay/quay-builder-rhel8",
               product: "Red Hat Quay 3",
               vendor: "Red Hat",
            },
         ],
         datePublic: "2024-05-09T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.3,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-354",
                     description: "Improper Validation of Integrity Check Value",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-20T11:51:44.252Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2024:0045",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:0045",
            },
            {
               name: "RHSA-2024:3718",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3718",
            },
            {
               name: "RHSA-2024:4159",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4159",
            },
            {
               name: "RHSA-2024:4613",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4613",
            },
            {
               name: "RHSA-2024:4850",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4850",
            },
            {
               name: "RHSA-2024:4960",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:4960",
            },
            {
               name: "RHSA-2024:5258",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:5258",
            },
            {
               name: "RHSA-2024:5951",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:5951",
            },
            {
               name: "RHSA-2024:6054",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:6054",
            },
            {
               name: "RHSA-2024:6122",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:6122",
            },
            {
               name: "RHSA-2024:6708",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:6708",
            },
            {
               name: "RHSA-2024:6818",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:6818",
            },
            {
               name: "RHSA-2024:6824",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:6824",
            },
            {
               name: "RHSA-2024:7164",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7164",
            },
            {
               name: "RHSA-2024:7174",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7174",
            },
            {
               name: "RHSA-2024:7182",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7182",
            },
            {
               name: "RHSA-2024:7187",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7187",
            },
            {
               name: "RHSA-2024:7922",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7922",
            },
            {
               name: "RHSA-2024:7941",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:7941",
            },
            {
               name: "RHSA-2024:8260",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:8260",
            },
            {
               name: "RHSA-2024:8425",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:8425",
            },
            {
               name: "RHSA-2024:9097",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:9097",
            },
            {
               name: "RHSA-2024:9098",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:9098",
            },
            {
               name: "RHSA-2024:9102",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:9102",
            },
            {
               name: "RHSA-2024:9960",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:9960",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2024-3727",
            },
            {
               name: "RHBZ#2274767",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2274767",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2024-04-12T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2024-05-09T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "Containers/image: digest type does not guarantee valid type",
         x_redhatCweChain: "CWE-354: Improper Validation of Integrity Check Value",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2024-3727",
      datePublished: "2024-05-09T14:57:21.327Z",
      dateReserved: "2024-04-12T17:56:37.261Z",
      dateUpdated: "2025-03-20T11:51:44.252Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-13484

Vulnerability from cvelistv5

Published

2025-01-28 17:54

Modified

2025-02-12 16:28

Severity ?

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.

References

▼	URL	Tags
	https://access.redhat.com/security/cve/CVE-2024-13484	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2269376	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Red Hat

Red Hat OpenShift GitOps

cpe:/a:redhat:openshift_gitops:1

Red Hat

Red Hat OpenShift GitOps

cpe:/a:redhat:openshift_gitops:1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-13484",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-28T18:25:37.752075Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-12T16:02:49.183Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_gitops:1",
               ],
               defaultStatus: "unaffected",
               packageName: "openshift-gitops-1/argocd-rhel8",
               product: "Red Hat OpenShift GitOps",
               vendor: "Red Hat",
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:openshift_gitops:1",
               ],
               defaultStatus: "affected",
               packageName: "openshift-gitops-1/gitops-rhel8-operator",
               product: "Red Hat OpenShift GitOps",
               vendor: "Red Hat",
            },
         ],
         datePublic: "2025-01-28T17:43:15.879Z",
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "CHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-668",
                     description: "Exposure of Resource to Wrong Sphere",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-12T16:28:48.915Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2024-13484",
            },
            {
               name: "RHBZ#2269376",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2269376",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2024-03-13T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2025-01-28T17:43:15.879000+00:00",
               value: "Made public.",
            },
         ],
         title: "Openshift-gitops-operator-container: namespace isolation break",
         workarounds: [
            {
               lang: "en",
               value: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
            },
         ],
         x_redhatCweChain: "CWE-668: Exposure of Resource to Wrong Sphere",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2024-13484",
      datePublished: "2025-01-28T17:54:28.701Z",
      dateReserved: "2025-01-16T19:04:50.460Z",
      dateUpdated: "2025-02-12T16:28:48.915Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

cve-2025-24369

Vulnerability from cvelistv5

cve-2024-10846

Vulnerability from cvelistv5

cve-2025-0750

Vulnerability from cvelistv5

cve-2024-3727

Vulnerability from cvelistv5

cve-2024-13484

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature