VDB
RHSA-2021%3A2643
RHSA-2021%3A2643
PUBLISHED
CVSS 5.599999904632568 MEDIUM
A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "__proto__" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Risk Scores
CVSS 3.1
5.599999904632568
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:4991d2ea0b8592e143a53fcb1e39ff128104a163fd3510f26b3b8b91822eab1a_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:a75e6b2f6e7492192f7476273b11758f947b2c1799b83bb5ed18b980963391c8_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:b9caa8ca9307c4e8beb5afbc35a5276000d6dc04ad986cd354467aa65e727c4a_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:b9caa8ca9307c4e8beb5afbc35a5276000d6dc04ad986cd354467aa65e727c4a_amd64 |
| Red Hat | openshift4/ose-local-storage-operator@sha256:2d7ab31897f0a53125c974311dcefd6a7502e5ec7e289d059733e3e066029436_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-local-storage-operator@sha256:2d7ab31897f0a53125c974311dcefd6a7502e5ec7e289d059733e3e066029436_amd64 |
| Red Hat | openshift4/ose-logging-curator5@sha256:c82fdc5b2787e133efea204bb7676ac6ea63ad7267f4915fb6065634297dbeb1_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-logging-curator5@sha256:c82fdc5b2787e133efea204bb7676ac6ea63ad7267f4915fb6065634297dbeb1_s390x |
| Red Hat | openshift4/ose-node-problem-detector-rhel8@sha256:39b160779377d50c63567e8a6524ab16f75dfdd017088911d031dc4cf1c376e9_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-node-problem-detector-rhel8@sha256:39b160779377d50c63567e8a6524ab16f75dfdd017088911d031dc4cf1c376e9_s390x |
| Red Hat | openshift4/ose-egress-http-proxy@sha256:6a0cfd23df00ca4ff24b1c0ac28cce26a0ef288effbdac92c8b44d91a96a237e_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-local-storage-operator@sha256:53025f4a1a86d33640ca626a160f27250eadda9b282a51db421844755fd8a6f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-local-storage-operator@sha256:53025f4a1a86d33640ca626a160f27250eadda9b282a51db421844755fd8a6f7_ppc64le |
| Red Hat | openshift4/ose-logging-elasticsearch6@sha256:8b53a1f5ad7197aa4239388503f747c36eec65e61169ee4efd1a73f8a83d0700_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-logging-elasticsearch6@sha256:8b53a1f5ad7197aa4239388503f747c36eec65e61169ee4efd1a73f8a83d0700_s390x |
| Red Hat | openshift4/ose-cluster-capacity@sha256:6952385f033d105ab3d83bec9df7279a41da18e145eed4293d1ca10f3711acb9_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-capacity@sha256:6952385f033d105ab3d83bec9df7279a41da18e145eed4293d1ca10f3711acb9_ppc64le |
| Red Hat | openshift4/ose-sriov-cni@sha256:f88f86ec0c9d524f90de8f87dae607be84bdfeb5a90b938c7d89b3c0c34dcb17_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-sriov-cni@sha256:f88f86ec0c9d524f90de8f87dae607be84bdfeb5a90b938c7d89b3c0c34dcb17_s390x |
| Red Hat | openshift4/ose-descheduler@sha256:b6f8255ab107dd5d1858b85f45bd3c7c2c6c1a70f9b3166ab480da409ece0927_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-descheduler@sha256:b6f8255ab107dd5d1858b85f45bd3c7c2c6c1a70f9b3166ab480da409ece0927_ppc64le |
| Red Hat | openshift4/ose-sriov-cni@sha256:57b5cc9cbaa7e6611316f3a8e6140a19861bd916c181cc1d9905dd3a3880a6e8_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-sriov-cni@sha256:57b5cc9cbaa7e6611316f3a8e6140a19861bd916c181cc1d9905dd3a3880a6e8_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:99b7586291add5f6dd9cb8acce39c6c681e051028f7c47eb59f148b054423226_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:99b7586291add5f6dd9cb8acce39c6c681e051028f7c47eb59f148b054423226_ppc64le |
| Red Hat | openshift4/ose-elasticsearch-proxy@sha256:737da2ad43b0c2722e33649dc3e08e8a6c9bfa4e691d54b195ef457f01565855_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-elasticsearch-proxy@sha256:737da2ad43b0c2722e33649dc3e08e8a6c9bfa4e691d54b195ef457f01565855_amd64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:66ba6a700c885f6a02de096d79167c8e3f386e9ba9c063b44416ece72673e9aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:66ba6a700c885f6a02de096d79167c8e3f386e9ba9c063b44416ece72673e9aa_ppc64le |
| Red Hat | openshift4/ose-ansible-operator@sha256:674c74bc3a8b7e922ed75f23e5edf0420e74079efece2315f28a7c15a2b1c3a7_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-ansible-operator@sha256:674c74bc3a8b7e922ed75f23e5edf0420e74079efece2315f28a7c15a2b1c3a7_s390x |
| Red Hat | openshift4/ose-logging-curator5@sha256:e452fdec3701101b6cd8a21219e1ff2bb0646e2bfe0c8dd1296d077bb842cb79_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-logging-curator5@sha256:e452fdec3701101b6cd8a21219e1ff2bb0646e2bfe0c8dd1296d077bb842cb79_amd64 |
| Red Hat | openshift4/ose-service-idler-rhel8@sha256:1ef5464ba18c4209863cbb64d0f2a03ed1b18cdc1e84b783b79ec9693d64be8e_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-ptp@sha256:d2f3c8617d8a84b0257ae8a3d110a1f3c494566ae5364aa3069b776412f984dd_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-ptp@sha256:d2f3c8617d8a84b0257ae8a3d110a1f3c494566ae5364aa3069b776412f984dd_s390x |
…and 106 more
Timeline
- Jul 14, 2021 CVE Published
- Feb 27, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2021:2643 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1813344 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1979134 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2643.json advisory
- https://access.redhat.com/security/cve/CVE-2020-7598 advisory
- https://www.cve.org/CVERecord?id=CVE-2020-7598 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-7598 advisory
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 advisory