VDB
CVE-2024-12698
CVE-2024-12698
PUBLISHED
CVSS 6.5 MEDIUM
An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.
EPSS 0.50% · 42.3th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.50%
42.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9, v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 |
| 0, 0 |
Timeline
- Dec 18, 2024 CVE Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Dec 19, 2024 EPSS Score
- Jan 5, 2025 EPSS Score
- Jan 21, 2025 PoC Published
- Jan 23, 2025 EPSS Score
- Feb 9, 2025 EPSS Score
- Feb 25, 2025 PoC Published
- Feb 26, 2025 EPSS Score
- Mar 9, 2025 Coalition ESS Score
- Mar 15, 2025 EPSS Score