VDB
RHSA-2023%3A3297
RHSA-2023%3A3297
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Red Hat Advanced Cluster Management for Kubernetes 2.7.4 General Availability release images, which fix security issues and update container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| rhacm2/endpoint | ||
| rhacm2/console | ||
| rhacm2/config | ||
| rhacm2/iam | ||
| rhacm2/grafana | ||
| rhacm2/acm | ||
| rhacm2/governance | ||
| rhacm2/cert | ||
| rhacm2/cluster | ||
| Red Hat Advanced Cluster Management for Kubernetes 2.7 for RHEL 8 |
Timeline
- May 24, 2023 CVE Published
- Nov 22, 2024 CVE Updated
- May 7, 2026 Distribution Patch
- May 7, 2026 Distribution Patch
- May 7, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:3297 advisory
- https://access.redhat.com/security/updates/classification/#critical url
- https://bugzilla.redhat.com/show_bug.cgi?id=2208376 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2208377 url
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3297.json advisory