VDB
RHSA-2022%3A5531
RHSA-2022%3A5531
PUBLISHED
CVSS 8.800000190734863 HIGH
A flaw was found in the NATS nats-server in an experimental feature that provides dynamically provisioned sandbox accounts that do not check the clients’ authorization. This flaw allows an attacker to take advantage of its valid account and switch over to another existing account without further authentication.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/governance-policy-status-sync-rhel8@sha256:154e5ac75cfaafe5154b3a641c1c221d27dffc9ce3eed18d02b273b18ad0cbce_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/governance-policy-status-sync-rhel8@sha256:154e5ac75cfaafe5154b3a641c1c221d27dffc9ce3eed18d02b273b18ad0cbce_arm64 |
| Red Hat | rhacm2/acm-must-gather-rhel8@sha256:ab172285f656a3258bf141b8893a87c3457ff0ba8a7bee8a2e859a3650089140_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/acm-must-gather-rhel8@sha256:ab172285f656a3258bf141b8893a87c3457ff0ba8a7bee8a2e859a3650089140_ppc64le |
| Red Hat | rhacm2/multicloud-integrations-rhel8@sha256:024a41fb31536944ed73de4a9dc11caa49e999ecfec26cb9e6e26c12e8277f0f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/multicloud-integrations-rhel8@sha256:024a41fb31536944ed73de4a9dc11caa49e999ecfec26cb9e6e26c12e8277f0f_ppc64le |
| Red Hat | rhacm2/insights-client-rhel8@sha256:16d23a153968bbf7324250ec401c19d6361e7a72eccbc32ece0f262a16020273_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | * |
| Red Hat | rhacm2/prometheus-rhel8@sha256:b32ab923422d4717f2aa64639d623b7901feefd7132f47945c0c0a0d92470f56_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | * |
| Red Hat | rhacm2/prometheus-rhel8@sha256:4f72c491d9100a148a3335d99c4e91e51cc3502904ae41c6817e9d3c995a6bb1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/prometheus-rhel8@sha256:4f72c491d9100a148a3335d99c4e91e51cc3502904ae41c6817e9d3c995a6bb1_amd64 |
| Red Hat | rhacm2/search-aggregator-rhel8@sha256:732840659e3f3d30afa019f31c9ef7b12c2bfe9837de850c466396f83a210710_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/search-aggregator-rhel8@sha256:732840659e3f3d30afa019f31c9ef7b12c2bfe9837de850c466396f83a210710_amd64 |
| Red Hat | rhacm2/cluster-proxy-addon-rhel8@sha256:2328992eb4278447ca8938ec9f4670e0aa01f984c7c8ad3233f190472dd57a35_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/cluster-proxy-addon-rhel8@sha256:2328992eb4278447ca8938ec9f4670e0aa01f984c7c8ad3233f190472dd57a35_s390x |
| Red Hat | rhacm2/kube-state-metrics-rhel8@sha256:1b1fc9437a3f6fa8dd4787f663efa1c2bce1b342bdbbc03dd93bb4c415894667_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/kube-state-metrics-rhel8@sha256:1b1fc9437a3f6fa8dd4787f663efa1c2bce1b342bdbbc03dd93bb4c415894667_amd64 |
| Red Hat | rhacm2/memcached-rhel8@sha256:304a17b2033ccea3044b3ac35d3266d24fd3a3c119bc2a2baa10be0079ae2429_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/memcached-rhel8@sha256:304a17b2033ccea3044b3ac35d3266d24fd3a3c119bc2a2baa10be0079ae2429_s390x |
| Red Hat | rhacm2/rbac-query-proxy-rhel8@sha256:03e2d8faaacb44aa60e15da3bafcc1b1e82090b32eba825058507d682eb9a45a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/rbac-query-proxy-rhel8@sha256:03e2d8faaacb44aa60e15da3bafcc1b1e82090b32eba825058507d682eb9a45a_amd64 |
| Red Hat | rhacm2/klusterlet-addon-rhel8-operator@sha256:120e2625eab902d5363e6a740b6adbf39c859a830f48945cdd6d92a3e757298c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/klusterlet-addon-rhel8-operator@sha256:120e2625eab902d5363e6a740b6adbf39c859a830f48945cdd6d92a3e757298c_arm64 |
| Red Hat | rhacm2/governance-policy-template-sync-rhel8@sha256:fb7ab671bbb2c267e77ebc947ff3fe9c8b284a3be3f05576116db284bf4ee8cd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/governance-policy-template-sync-rhel8@sha256:fb7ab671bbb2c267e77ebc947ff3fe9c8b284a3be3f05576116db284bf4ee8cd_arm64 |
| Red Hat | rhacm2/redisgraph-tls-rhel8@sha256:0f0ba32a7fbdea3329c21c0239bd58d48bab7811e4aed0b61ba833df17b7b146_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/redisgraph-tls-rhel8@sha256:0f0ba32a7fbdea3329c21c0239bd58d48bab7811e4aed0b61ba833df17b7b146_arm64 |
| Red Hat | rhacm2/iam-policy-controller-rhel8@sha256:a636ebf29d6884eac82fc9351908b97e60f1be6c3989e57553a929f82107bb1a_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/iam-policy-controller-rhel8@sha256:a636ebf29d6884eac82fc9351908b97e60f1be6c3989e57553a929f82107bb1a_arm64 |
| Red Hat | rhacm2/thanos-rhel8@sha256:939776cf3df39a6e075ad50356e4555f83ed17a8f7857d902911f6874c4a38c6_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | * |
| Red Hat | rhacm2/governance-policy-status-sync-rhel8@sha256:64dd28679488a79d3f8717f058774df4a51d2f6d39b3efc764b3e014a9945b81_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/governance-policy-status-sync-rhel8@sha256:64dd28679488a79d3f8717f058774df4a51d2f6d39b3efc764b3e014a9945b81_s390x |
| Red Hat | rhacm2/search-aggregator-rhel8@sha256:2c4a1104ef2af839c2b23e373fc6e8a2ebbfaa152f1f21aca97f4c453d642a0f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/search-aggregator-rhel8@sha256:2c4a1104ef2af839c2b23e373fc6e8a2ebbfaa152f1f21aca97f4c453d642a0f_arm64 |
| Red Hat | rhacm2/config-policy-controller-rhel8@sha256:16fb88c3f535d44ca35fc94640a62f473d97b47669b530de2a6f3473bc53271e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/config-policy-controller-rhel8@sha256:16fb88c3f535d44ca35fc94640a62f473d97b47669b530de2a6f3473bc53271e_arm64 |
| Red Hat | rhacm2/governance-policy-spec-sync-rhel8@sha256:0ffaa63c046634f334371f2aa81bbec809eef8e72c36e28f7e12ad1df4c5622b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/governance-policy-spec-sync-rhel8@sha256:0ffaa63c046634f334371f2aa81bbec809eef8e72c36e28f7e12ad1df4c5622b_s390x |
…and 184 more
Timeline
- Jul 11, 2022 CVE Published
- Apr 27, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:5531 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2052573 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2101453 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2087686 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2088270 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2090802 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2095333 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2096389 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5531.json advisory
- https://access.redhat.com/security/cve/CVE-2022-24450 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-24450 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-24450 advisory
- https://advisories.nats.io/CVE/CVE-2022-24450.txt advisory