VDB
RHSA-2022%3A5875
RHSA-2022%3A5875
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the go package of the cmd library in golang. The go command could be tricked into accepting a branch, which resembles a version tag. This issue could allow a remote unauthenticated attacker to bypass security restrictions and introduce invalid or incorrect tags, reducing the integrity of the environment.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:fc2100ad6e334a715e9d24ce7f341c8f1dc6cae66ed70b3dd88c53264e65d2a5_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/egress-router-cni-rhel8@sha256:fc2100ad6e334a715e9d24ce7f341c8f1dc6cae66ed70b3dd88c53264e65d2a5_arm64, openshift4/egress-router-cni-rhel8@sha256:fc2100ad6e334a715e9d24ce7f341c8f1dc6cae66ed70b3dd88c53264e65d2a5_arm64 |
| Red Hat | openshift4/ose-installer-artifacts@sha256:d4015af5e2aab611fbc26cb21a06c871248126a0920a9106408a74c5133dd5f4_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-installer-artifacts@sha256:d4015af5e2aab611fbc26cb21a06c871248126a0920a9106408a74c5133dd5f4_amd64, openshift4/ose-installer-artifacts@sha256:d4015af5e2aab611fbc26cb21a06c871248126a0920a9106408a74c5133dd5f4_amd64, * |
| Red Hat | openshift4/ose-docker-builder@sha256:337ca76a55c8cd737ed0f0f319511b7f90600627ef20e8c1cddbda3b9ff51b3a_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-docker-builder@sha256:337ca76a55c8cd737ed0f0f319511b7f90600627ef20e8c1cddbda3b9ff51b3a_arm64, openshift4/ose-docker-builder@sha256:337ca76a55c8cd737ed0f0f319511b7f90600627ef20e8c1cddbda3b9ff51b3a_arm64, * |
| Red Hat | openshift4/ose-cli-artifacts@sha256:1b5c4f35e0324eec5f2241c34a01e64acbabd7282698c2bdd31be4260d2db05b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cli-artifacts@sha256:1b5c4f35e0324eec5f2241c34a01e64acbabd7282698c2bdd31be4260d2db05b_ppc64le, openshift4/ose-cli-artifacts@sha256:1b5c4f35e0324eec5f2241c34a01e64acbabd7282698c2bdd31be4260d2db05b_ppc64le, openshift4/ose-cli-artifacts@sha256:1b5c4f35e0324eec5f2241c34a01e64acbabd7282698c2bdd31be4260d2db05b_ppc64le |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:75833eb800e0ffc7024e8f278ae7fc5e16c58e0c0165bd7bfba619cc76798869_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-multus-admission-controller@sha256:75833eb800e0ffc7024e8f278ae7fc5e16c58e0c0165bd7bfba619cc76798869_arm64, openshift4/ose-multus-admission-controller@sha256:75833eb800e0ffc7024e8f278ae7fc5e16c58e0c0165bd7bfba619cc76798869_arm64, openshift4/ose-multus-admission-controller@sha256:75833eb800e0ffc7024e8f278ae7fc5e16c58e0c0165bd7bfba619cc76798869_arm64 |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:7fc070b667d5237a801169424a57271b398cc0254b1eda3432f230aa007f916d_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-external-provisioner-rhel8@sha256:7fc070b667d5237a801169424a57271b398cc0254b1eda3432f230aa007f916d_s390x, *, * |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:ac72b9433cd9303e34d5aa4a2855ee8c26f8a8388c4a88e61f072a6409c1a41b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-cluster-kube-scheduler-operator@sha256:ac72b9433cd9303e34d5aa4a2855ee8c26f8a8388c4a88e61f072a6409c1a41b_ppc64le, openshift4/ose-cluster-kube-scheduler-operator@sha256:ac72b9433cd9303e34d5aa4a2855ee8c26f8a8388c4a88e61f072a6409c1a41b_ppc64le |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:eb57f5d18491e7c3d317c8a33035fceb83c23bc3bf64a0cd2a66176320c1094c_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-cluster-bootstrap@sha256:eb57f5d18491e7c3d317c8a33035fceb83c23bc3bf64a0cd2a66176320c1094c_ppc64le, openshift4/ose-cluster-bootstrap@sha256:eb57f5d18491e7c3d317c8a33035fceb83c23bc3bf64a0cd2a66176320c1094c_ppc64le |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:060e06bc129287407170c77ea3572f1dd2879ef4ae6fe9971ec9210ab681f262_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-external-provisioner-rhel8@sha256:060e06bc129287407170c77ea3572f1dd2879ef4ae6fe9971ec9210ab681f262_ppc64le, openshift4/ose-csi-external-provisioner-rhel8@sha256:060e06bc129287407170c77ea3572f1dd2879ef4ae6fe9971ec9210ab681f262_ppc64le, openshift4/ose-csi-external-provisioner-rhel8@sha256:060e06bc129287407170c77ea3572f1dd2879ef4ae6fe9971ec9210ab681f262_ppc64le |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:8850fde5d87d6d816acd36c52c4f8cfd7999486248565985fb6b26b24da0d6f4_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:8850fde5d87d6d816acd36c52c4f8cfd7999486248565985fb6b26b24da0d6f4_amd64, *, openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:8850fde5d87d6d816acd36c52c4f8cfd7999486248565985fb6b26b24da0d6f4_amd64 |
| Red Hat | openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:b0e93d5d85fa5d8ec1c7eccf53dbdc5ff2172480830ff0f6f4386a3e95e8a146_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:b0e93d5d85fa5d8ec1c7eccf53dbdc5ff2172480830ff0f6f4386a3e95e8a146_amd64, openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:b0e93d5d85fa5d8ec1c7eccf53dbdc5ff2172480830ff0f6f4386a3e95e8a146_amd64 |
| Red Hat | openshift4/ose-cluster-dns-operator@sha256:fd7d342c9feda5a23cf67abc0b85e23b223a30db3ad99706ae58608b50426da8_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cluster-dns-operator@sha256:fd7d342c9feda5a23cf67abc0b85e23b223a30db3ad99706ae58608b50426da8_ppc64le, openshift4/ose-cluster-dns-operator@sha256:fd7d342c9feda5a23cf67abc0b85e23b223a30db3ad99706ae58608b50426da8_ppc64le, openshift4/ose-cluster-dns-operator@sha256:fd7d342c9feda5a23cf67abc0b85e23b223a30db3ad99706ae58608b50426da8_ppc64le |
| Red Hat | openshift4/ose-kube-state-metrics@sha256:2dbc92634451572beb0c87f58b33c7bd8ea8c96ec3d54f144603852283d22a44_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-kube-state-metrics@sha256:2dbc92634451572beb0c87f58b33c7bd8ea8c96ec3d54f144603852283d22a44_s390x, openshift4/ose-kube-state-metrics@sha256:2dbc92634451572beb0c87f58b33c7bd8ea8c96ec3d54f144603852283d22a44_s390x |
| Red Hat | openshift4/ose-csi-livenessprobe@sha256:cb3178e938b44f647e337a5c4623774499fba209f9886e7809fd7ee2b8b570e2_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-livenessprobe@sha256:cb3178e938b44f647e337a5c4623774499fba209f9886e7809fd7ee2b8b570e2_ppc64le, openshift4/ose-csi-livenessprobe@sha256:cb3178e938b44f647e337a5c4623774499fba209f9886e7809fd7ee2b8b570e2_ppc64le, openshift4/ose-csi-livenessprobe@sha256:cb3178e938b44f647e337a5c4623774499fba209f9886e7809fd7ee2b8b570e2_ppc64le |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:946f1f2fb3a6e48e4932f9859bb026510fa96716b0efac184729b8f9c7473090_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/cloud-network-config-controller-rhel8@sha256:946f1f2fb3a6e48e4932f9859bb026510fa96716b0efac184729b8f9c7473090_s390x, *, * |
| Red Hat | openshift4/ose-docker-builder@sha256:45e9c80b1f8689fbfa3cd8bdd2abdadf95b6a4fde30bcf3a94d0e2a5b971560d_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-docker-builder@sha256:45e9c80b1f8689fbfa3cd8bdd2abdadf95b6a4fde30bcf3a94d0e2a5b971560d_s390x, *, * |
| Red Hat | openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:86159c9c433d44d7fb5cab8fd8a2747662c809021dea71d3ec0ab557dc0cac78_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:86159c9c433d44d7fb5cab8fd8a2747662c809021dea71d3ec0ab557dc0cac78_ppc64le, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:86159c9c433d44d7fb5cab8fd8a2747662c809021dea71d3ec0ab557dc0cac78_ppc64le, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:86159c9c433d44d7fb5cab8fd8a2747662c809021dea71d3ec0ab557dc0cac78_ppc64le |
| Red Hat | openshift4/ose-oauth-proxy@sha256:fd810dce5f7477ae5ace26245b3f934c99da62735b6b55d82d3f5321e2e8c1f3_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-oauth-proxy@sha256:fd810dce5f7477ae5ace26245b3f934c99da62735b6b55d82d3f5321e2e8c1f3_amd64, openshift4/ose-oauth-proxy@sha256:fd810dce5f7477ae5ace26245b3f934c99da62735b6b55d82d3f5321e2e8c1f3_amd64, * |
| Red Hat | openshift4/ose-oauth-server-rhel8@sha256:9ede08f9c60c5c5b03472e242b0fc3af70bc72957ef0fa726a6d21f0f8fe23ca_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-oauth-server-rhel8@sha256:9ede08f9c60c5c5b03472e242b0fc3af70bc72957ef0fa726a6d21f0f8fe23ca_ppc64le, *, openshift4/ose-oauth-server-rhel8@sha256:9ede08f9c60c5c5b03472e242b0fc3af70bc72957ef0fa726a6d21f0f8fe23ca_ppc64le |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:483367ef8b7975e468886edcea24613fd0e0640416291d0ac47ebcc9fdbef510_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-hypershift-rhel8@sha256:483367ef8b7975e468886edcea24613fd0e0640416291d0ac47ebcc9fdbef510_amd64, openshift4/ose-hypershift-rhel8@sha256:483367ef8b7975e468886edcea24613fd0e0640416291d0ac47ebcc9fdbef510_amd64 |
…and 1089 more
Timeline
- Aug 9, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jun 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:5875 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1921656 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2052444 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2053429 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2053541 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2053703 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2063153 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2077689 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2086451 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2100103 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2106158 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107495 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107678 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2108193 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2109124 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2110536 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2110765 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2110938 issue
…and 18 more