← All credits

Red Hat would like to thank Antony Di Scala and Michael Whale for reporting this issue.

16 vulnerability records and advisories credit this contributor.

Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

Mirror-registry: quay: insecure direct object reference in blobupload

Mirror-registry: quay: quay: server-side request forgery via log export functionality

Mirror-registry: remote code execution using pickle deserialization

Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

Rhpam: privilege escalation via excessive /etc/passwd permissions

Osus-operator: privilege escalation via excessive /etc/passwd permissions

Web-terminal: privilege escalation via excessive /etc/passwd permissions

Mce: privilege escalation via excessive /etc/passwd permissions

Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container