rhsa-2022_0043
Vulnerability from csaf_redhat
Published
2022-01-10 07:15
Modified
2024-11-22 18:41
Summary
Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging security and bug fix update (5.2.5)

Notes

Topic
An update is now available for OpenShift Logging (5.2.5) Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Openshift Logging Bug Fix Release (5.2.5) Security Fix(es): * log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for OpenShift Logging (5.2.5)\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Openshift Logging Bug Fix Release (5.2.5)\n\nSecurity Fix(es):\n\n* log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0043",
        "url": "https://access.redhat.com/errata/RHSA-2022:0043"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "2034067",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034067"
      },
      {
        "category": "external",
        "summary": "LOG-2073",
        "url": "https://issues.redhat.com/browse/LOG-2073"
      },
      {
        "category": "external",
        "summary": "LOG-2087",
        "url": "https://issues.redhat.com/browse/LOG-2087"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0043.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging security and bug fix update (5.2.5)",
    "tracking": {
      "current_release_date": "2024-11-22T18:41:11+00:00",
      "generator": {
        "date": "2024-11-22T18:41:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2022:0043",
      "initial_release_date": "2022-01-10T07:15:36+00:00",
      "revision_history": [
        {
          "date": "2022-01-10T07:15:36+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-01-10T07:15:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T18:41:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Logging 5.2",
                "product": {
                  "name": "OpenShift Logging 5.2",
                  "product_id": "8Base-OSE-LOGGING-5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:logging:5.2::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
                "product": {
                  "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
                  "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.2.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
                "product": {
                  "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
                  "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.2.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
                "product": {
                  "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
                  "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-88"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
                "product": {
                  "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
                  "product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.0.0-58"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
                "product": {
                  "name": "openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
                  "product_id": "openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-60"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
                "product": {
                  "name": "openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
                  "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-83"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
                "product": {
                  "name": "openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
                  "product_id": "openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.3.0-82"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
                "product": {
                  "name": "openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
                  "product_id": "openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.7.4-87"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
                "product": {
                  "name": "openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
                  "product_id": "openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-94"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
                "product": {
                  "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
                  "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.2.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
                "product": {
                  "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
                  "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.2.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
                "product": {
                  "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
                  "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-88"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
                "product": {
                  "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
                  "product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.0.0-58"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x",
                "product": {
                  "name": "openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x",
                  "product_id": "openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-60"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x",
                "product": {
                  "name": "openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x",
                  "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-83"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
                "product": {
                  "name": "openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
                  "product_id": "openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.3.0-82"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
                "product": {
                  "name": "openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
                  "product_id": "openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.7.4-87"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
                "product": {
                  "name": "openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
                  "product_id": "openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-94"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
                "product": {
                  "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
                  "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.2.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
                "product": {
                  "name": "openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
                  "product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.2.5-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
                  "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.2.5-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
                  "product_id": "openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-operator-bundle\u0026tag=v5.2.5-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
                  "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-88"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
                "product": {
                  "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
                  "product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.0.0-58"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
                "product": {
                  "name": "openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
                  "product_id": "openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-60"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
                  "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-83"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
                "product": {
                  "name": "openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
                  "product_id": "openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.3.0-82"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
                "product": {
                  "name": "openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
                  "product_id": "openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.7.4-87"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
                "product": {
                  "name": "openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
                  "product_id": "openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-94"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64"
        },
        "product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le"
        },
        "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64"
        },
        "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x"
        },
        "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x"
        },
        "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le"
        },
        "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le"
        },
        "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x"
        },
        "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le"
        },
        "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x"
        },
        "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64"
        },
        "product_reference": "openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le"
        },
        "product_reference": "openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x"
        },
        "product_reference": "openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64"
        },
        "product_reference": "openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le"
        },
        "product_reference": "openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x"
        },
        "product_reference": "openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64"
        },
        "product_reference": "openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x"
        },
        "product_reference": "openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le"
        },
        "product_reference": "openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64"
        },
        "product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x"
        },
        "product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le"
        },
        "product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64 as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64"
        },
        "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le"
        },
        "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x as a component of OpenShift Logging 5.2",
          "product_id": "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x"
        },
        "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-45105",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2021-12-19T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034067"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has performed an analysis of this flaw and has classified the Attack Complexity(AC) as High because there are multiple factors involved which are beyond attacker\u0027s control:\n\n- The application has to use the logging configuration using a Context Map Lookup (for example, $${ctx:loginId}) which is a non-default Pattern Layout.\n- The application developer has to use the map org.apache.logging.log4j.ThreadContext in the application code and save at-least one key (for example, ThreadContext.put(\"loginId\", \"myId\");) in the ThreadContext map object.\n- Attackers must also know this saved key name in order to exploit this flaw.\n\nNote that saving keys in this map is a non-essential usage of log4j and just an optional feature provided. Refer to https://logging.apache.org/log4j/2.x/manual/lookups.html#ContextMapLookup to know more about the Context Map Lookup feature of Log4j.\n\nLog4j 1.x is not impacted by this vulnerability. Note that only the log4j-core JAR file is impacted by this vulnerability. Applications using ONLY the log4j-api JAR file without the log4j-core JAR file are NOT impacted by this vulnerability.\n\n\nDespite including a vulnerable version of Log4j 2.x, this vulnerability is not exploitable in Elasticsearch[0], as shipped in OpenShift Container Platform and OpenShift Logging. OpenShift 3.11 specifically does not contain any context lookups:\n\nhttps://github.com/openshift/openshift-ansible/blob/release-3.11/roles/openshift_logging_elasticsearch/templates/log4j2.properties.j2\n\nThis vulnerability is therefore rated Low for Elasticsearch in OpenShift Container Platform and OpenShift Logging.\n\n[0] https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476#update-december-18-4",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x"
        ],
        "known_not_affected": [
          "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
          "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
          "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
          "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-45105"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034067",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034067"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-45105",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-45105"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-45105",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45105"
        },
        {
          "category": "external",
          "summary": "https://issues.apache.org/jira/browse/LOG4J2-3230",
          "url": "https://issues.apache.org/jira/browse/LOG4J2-3230"
        },
        {
          "category": "external",
          "summary": "https://logging.apache.org/log4j/2.x/security.html",
          "url": "https://logging.apache.org/log4j/2.x/security.html"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2021/12/19/1",
          "url": "https://www.openwall.com/lists/oss-security/2021/12/19/1"
        }
      ],
      "release_date": "2021-12-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-01-10T07:15:36+00:00",
          "details": "For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nFor Red Hat OpenShift Logging 5.2, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html",
          "product_ids": [
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0043"
        },
        {
          "category": "workaround",
          "details": "For Log4j 2 versions up to and including 2.16.0, this flaw can be mitigated by:\n- In PatternLayout in the Log4j logging configuration, replace Context Lookups like ${ctx:loginId} or $${ctx:loginId} with Thread Context Map patterns (%X, %mdc, or %MDC) like %X{loginId}.\n- Otherwise, in the Log4j logging configuration, remove references to Context Lookups like ${ctx:loginId} or $${ctx:loginId} where they originate from sources external to the application such as HTTP headers or user input.",
          "product_ids": [
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-operator-bundle@sha256:f441a3d6ada40ebf127309cfc838ec2bf24e919202afdf33ae36d090d6ccf612_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:2737f64abec6a60beb04a864b5cbb955a85bb01fd13290ca5ec243658cde0eb1_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:3320fb2072932beb61a0ef8f4a0726926961ec27adc4d278465c1d8c29487d46_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/cluster-logging-rhel8-operator@sha256:6b0f85787a55d6e7fca00d816ae715742f8c5911019212b8ebe277a4c7997e9a_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-operator-bundle@sha256:ad381af7b66469925632fd1d5adcf4652a9cbf84904091f9c204ec4532e37b52_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:b0fd676039ff9b7604d2c306302b485094338ef4952ae8121ffd6ae4f0da298c_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:da4f5a222bbe352842f4ef077d270460455f13f62ab0bbca7709e5ae3ce3c61e_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-proxy-rhel8@sha256:dfcebd06c57e26d60b824da319bbdee9d7242b971f0b8a006032a35f84e4c39f_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:26268a3bb5c21309ddf517f06b56b8f1056b34d995b48de9ad2961e53cb9e4f4_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:92125a4b8dad81cb070f2a0e97ad1e8a4fc2cff59cbdc87061556591d70a2555_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch-rhel8-operator@sha256:dc8e645d7b22be637c7666ae2fa4607ad68412eee08ad66b23c4e8aaa06bb5ac_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:571e0785de2935775ee696945fc57c747ddccb0f42a51d578b7f28b98b1d57c7_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:c60444a685facbedadf158e90b108e8ab4f0605121a9491a22ce983cdac1d53a_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/eventrouter-rhel8@sha256:dea79e463bb165ba4be86bf432a40b9fa5ba3832f511f21177a1018118b0ffa0_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:582b909b4e62f4f22532fe1bbf526d6d6a051282c7ba8593e23133cc41bcaaf1_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:5ca68312af3ce179486cc5501e3ddd3875964208300ca07ec6680c3a8512b38e_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/fluentd-rhel8@sha256:958c3e278b02b9ab4cc82b5f4359b294cf9f267d2e982c04f2eed03b649913c8_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:8daa9e05f88202d80606b884a49d4bc5bc00cd6bbdeeb57c13edf1ac57600d54_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e0fdd53f3fee99889f004c0fbe7e15ef818ecd5db2bf4fd94ed219c4108f3691_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/kibana6-rhel8@sha256:e6c4f271433cb1029ed4ba256a60c14e1cf09cfbce3b01a9f1aea3ed3be8ec63_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:203224a2e0cfb0da9f168e1b54075326b2ae80c181d449ca3770a2ca85d11b79_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:569eda5410d9a8e44257d05a5de335f0ce6bcd8773d03fbb0c0ed463f936fe27_s390x",
            "8Base-OSE-LOGGING-5.2:openshift-logging/log-file-metric-exporter-rhel8@sha256:ea9d87d2325cb37db136efaf17876b0eda83e295d71983bf823fcd9936453dfb_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:638f3018d9363ea5d006941f037025bf221b15fb530647856bec47b404d1143a_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:b42d6635e248db4af40ad0e8806a8ea2021f706c8a99c2bdcef767318f7a994c_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/logging-curator5-rhel8@sha256:c6473ffb404982b0969296ec109d19568b300955abf9cdf9298e085671358d21_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:3b1f2a711ff8e9c7df0ae2f40bf9c700f559b6027c6a2cacaf15f016fea61083_ppc64le",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:40992ca8e55a2c4508095c1c8d69f2db6c44a498de1a679e82f2d602977f8b92_amd64",
            "8Base-OSE-LOGGING-5.2:openshift-logging/elasticsearch6-rhel8@sha256:64d4e40746eee55b9c5b3a8ea51fac27e4d279cc9ded536983f3d8c682c787b6_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.