rhsa-2024_1345
Vulnerability from csaf_redhat
Published
2024-03-15 17:29
Modified
2024-09-16 17:49
Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps security update
Notes
Topic
An update is now available for Red Hat OpenShift GitOps 1.10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications.
Security Fix(es):
* Before this update, due to the improper filtering of URL protocols in the Argo CD application summary component, an attacker could achieve cross-site scripting with permission to edit the application. This update fixes the issue by upgrading the Argo CD version to v2.8.12 which has the fix applied and is therefore not vulnerable (CVE-2024-28175)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenShift GitOps 1.10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications.\n\nSecurity Fix(es):\n\n* Before this update, due to the improper filtering of URL protocols in the Argo CD application summary component, an attacker could achieve cross-site scripting with permission to edit the application. This update fixes the issue by upgrading the Argo CD version to v2.8.12 which has the fix applied and is therefore not vulnerable (CVE-2024-28175)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1345",
"url": "https://access.redhat.com/errata/RHSA-2024:1345"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.openshift.com/gitops/1.10/understanding_openshift_gitops/about-redhat-openshift-gitops.html",
"url": "https://docs.openshift.com/gitops/1.10/understanding_openshift_gitops/about-redhat-openshift-gitops.html"
},
{
"category": "external",
"summary": "2268518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268518"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_1345.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps security update",
"tracking": {
"current_release_date": "2024-09-16T17:49:58+00:00",
"generator": {
"date": "2024-09-16T17:49:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2024:1345",
"initial_release_date": "2024-03-15T17:29:47+00:00",
"revision_history": [
{
"date": "2024-03-15T17:29:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-03-15T17:29:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-16T17:49:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.10",
"product": {
"name": "Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64",
"product": {
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64",
"product_id": "openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.10.3-2"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.10.3-2"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.10.3-2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.10.3-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.10.3-2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64"
},
"product_reference": "openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64 as a component of Red Hat OpenShift GitOps 1.10",
"product_id": "8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64",
"relates_to_product_reference": "8Base-GitOps-1.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-28175",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-03-07T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268518"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Argo CD. Due to improper filtering of URL protocols in the application summary component, a remote attacker can execute a cross-site scripting (XSS) attack with privileges to edit the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "argo-cd: XSS vulnerability in application summary component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64"
],
"known_not_affected": [
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:5a40902d458902970ce16354c5ddbe836267342ecf744fa91a0573a2b2d10137_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:b60a19a2fdb4cd62250379198b479fd27678cbee03ccca342c9adfce9c7a8b7c_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:ea49f6180d4745cae913a8a4afc8e1562cd305d013fe4dd146519caaafd77773_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/argo-rollouts-rhel8@sha256:ec5a025c5f521427b6b351df83f84609dc613206fd7a425bb1c52db5bcaeabc5_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:0abc9616dacf980010d8e8a1afbfbe9f2f9c2a3f4a230b24882937a1db6ad727_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:224a675cee09ab390a5d142df02f3b1ac027e2b990c032bf952b2f19b4991876_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:5384fbff804b5695063fb86cd40b882a2445e97f3a5fbae76eb7519acae8b373_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/console-plugin-rhel8@sha256:69384801212a7078e828b4c1607c5090353574c3cac15e19d45b9a3cd60b8041_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:0d15d2a8e2f914074f045eb53cd67f5f0a64221fb10abae399dedff15950d130_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:14f25329da45fbcce1e51a2c170080e43d87d551a810c4d7e790c763b7988d68_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:24b016e044c96505be199ea2c748adcc18cd2dad34b2dd1b894e8a46bd5d08d2_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/dex-rhel8@sha256:56d88fa414e3313d228061d6a646b2003d4c2272d98cfbac76e7e7823154ba5e_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-operator-bundle@sha256:e2f3dd4c2fd8f4b96cc52a16bd5f8612ae50286f1f828e3046803132827a744e_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:280887260b20b2b96395c238b590985404e9dbd4340f840825c7383bdc1423ed_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:897dcf18c3658660e8b8f2de951b32c7d3ebfc496fb59304202555a899bfa328_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:b445dbdbd289ce4ac89d4693a565ebdaaa37f3e6eb5148a8d8d2a562f5a305f2_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/kam-delivery-rhel8@sha256:c01da53b5844d5403f42a7fd2653e8b2e991ed4140bd85ec17a07df077e06768_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:380a980bceef989a0966b1e68df9eaa8ed068cc5f4cc0a2d1ad56e6e26fa26f8_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:7d32bfb51fe6b6f73209446b1387036c2453b4a185695149f69bf01c63e3b4e7_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:b4dda67dbc043aa90e5c10a7eb479eb0c5292d4f855316791280bc54dae97761_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/must-gather-rhel8@sha256:dcd541930817cb186c98e28d6cd19d6718be1b5ee887326bf423524a71c30a80_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28175"
},
{
"category": "external",
"summary": "RHBZ#2268518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268518"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28175",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28175"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-jwv5-8mqv-g387",
"url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-jwv5-8mqv-g387"
}
],
"release_date": "2024-03-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1345"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.9,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:06b3f1d7954bb4bf996a4e322a88dcf34be9e0dc5c9460921042d24702cf9273_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:5bd431935a0f74050413b7f08261e11865e7d8d003f3c5031bfbef67169fec6d_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:7cb494d99634885e90b74a6c0a34ed3334080d9c07eea6aed5391c70f91fcf98_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/argocd-rhel8@sha256:a66d01c15bcfeee90db04b8bdaabdfa995f80fd90d6e6d6397562c9afeffc39a_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:23fa0c400b43aeee323ea4bd0b33bfc183bfa1c9d47fe9221cc576e228855afb_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:5b3a993c39b2256cdd11ca1dca87713271f49fe07d630f872582388e5132c454_arm64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:84e0f709503a4e361f58a1e195e13d9cd18bd9fd12468c18a262af2f259314e4_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8-operator@sha256:9f706db14cd4782e5e84cee8c6772db7f6b52fb53e1c825f35875c202dfff537_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:1f18050d0e9c10388d6361f9514f8db9b5fdaaf1edafd2a5809e9e816ed64c4b_amd64",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:ab302c79427c6750450a3ec41c783bf343ddd396ddd947af6757466ee2b7ec62_ppc64le",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:adc811bd291f1c55a72c197e39533d70574e1d20118a969ecb76afe5a03b7205_s390x",
"8Base-GitOps-1.10:openshift-gitops-1/gitops-rhel8@sha256:d416b2f0ea3b69436e418d9ea4478cf40482c08a89f970c11b85d418453ec0f5_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "argo-cd: XSS vulnerability in application summary component"
}
]
}
Loading...