VDB

RHSA-2024%3A4455

RHSA-2024%3A4455 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in Axios that may expose a confidential session token. This issue can allow a remote attacker to bypass security measures and view sensitive data.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/virt-exportserver-rhel9@sha256:6a1562be0ed114e57bf6cbf74b3996886dc63bcc559e10628b570761d49de5eb_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/virt-exportserver-rhel9@sha256:6a1562be0ed114e57bf6cbf74b3996886dc63bcc559e10628b570761d49de5eb_arm64, container-native-virtualization/virt-exportserver-rhel9@sha256:6a1562be0ed114e57bf6cbf74b3996886dc63bcc559e10628b570761d49de5eb_arm64, container-native-virtualization/virt-exportserver-rhel9@sha256:6a1562be0ed114e57bf6cbf74b3996886dc63bcc559e10628b570761d49de5eb_arm64
Red Hatcontainer-native-virtualization/virtio-win-rhel9@sha256:8f4906d234e901547693013c16d455e464fe61072b8d0d4339b0acc30a8ed48a_amd64 as a component of CNV 4.16 for RHEL 9*, *, container-native-virtualization/virtio-win-rhel9@sha256:8f4906d234e901547693013c16d455e464fe61072b8d0d4339b0acc30a8ed48a_amd64
Red Hatcontainer-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:314d449d8968be818697ef6afc780c2d18d59db198615018c88883579ecfefe0_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:314d449d8968be818697ef6afc780c2d18d59db198615018c88883579ecfefe0_amd64, container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:314d449d8968be818697ef6afc780c2d18d59db198615018c88883579ecfefe0_amd64, container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:314d449d8968be818697ef6afc780c2d18d59db198615018c88883579ecfefe0_amd64
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:bcf09bf013542a447989dd6c0ba3ff7188170306dadc8630585a055b01dcf7f5_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/vm-console-proxy-rhel9@sha256:bcf09bf013542a447989dd6c0ba3ff7188170306dadc8630585a055b01dcf7f5_arm64, container-native-virtualization/vm-console-proxy-rhel9@sha256:bcf09bf013542a447989dd6c0ba3ff7188170306dadc8630585a055b01dcf7f5_arm64, container-native-virtualization/vm-console-proxy-rhel9@sha256:bcf09bf013542a447989dd6c0ba3ff7188170306dadc8630585a055b01dcf7f5_arm64
Red Hatcontainer-native-virtualization/mtq-operator-rhel9@sha256:69d3ce8dc68e5374010d46d69300e2fd44597a69bbde2f2b427455d0a1577ce7_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/mtq-operator-rhel9@sha256:69d3ce8dc68e5374010d46d69300e2fd44597a69bbde2f2b427455d0a1577ce7_arm64, *, container-native-virtualization/mtq-operator-rhel9@sha256:69d3ce8dc68e5374010d46d69300e2fd44597a69bbde2f2b427455d0a1577ce7_arm64
Red Hatcontainer-native-virtualization/virt-cdi-cloner-rhel9@sha256:37fc3f68e4969352e13145e2c1298854a56767913eb0acdc5fcf617a788ffd02_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/virt-cdi-cloner-rhel9@sha256:37fc3f68e4969352e13145e2c1298854a56767913eb0acdc5fcf617a788ffd02_amd64, container-native-virtualization/virt-cdi-cloner-rhel9@sha256:37fc3f68e4969352e13145e2c1298854a56767913eb0acdc5fcf617a788ffd02_amd64, container-native-virtualization/virt-cdi-cloner-rhel9@sha256:37fc3f68e4969352e13145e2c1298854a56767913eb0acdc5fcf617a788ffd02_amd64
Red Hatcontainer-native-virtualization/kubevirt-template-validator-rhel9@sha256:4432d1728d8a723fa25d58cb156160e351ec13e395d9e085887cb148a2a352b8_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/kubevirt-template-validator-rhel9@sha256:4432d1728d8a723fa25d58cb156160e351ec13e395d9e085887cb148a2a352b8_amd64, container-native-virtualization/kubevirt-template-validator-rhel9@sha256:4432d1728d8a723fa25d58cb156160e351ec13e395d9e085887cb148a2a352b8_amd64, container-native-virtualization/kubevirt-template-validator-rhel9@sha256:4432d1728d8a723fa25d58cb156160e351ec13e395d9e085887cb148a2a352b8_amd64
Red Hatcontainer-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64, *, container-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64
Red Hatcontainer-native-virtualization/pr-helper-rhel9@sha256:d712ec25c980df63dd01b8c0ef2238bccdeea11f275cb37b268b93a1d33d7885_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/pr-helper-rhel9@sha256:d712ec25c980df63dd01b8c0ef2238bccdeea11f275cb37b268b93a1d33d7885_arm64, container-native-virtualization/pr-helper-rhel9@sha256:d712ec25c980df63dd01b8c0ef2238bccdeea11f275cb37b268b93a1d33d7885_arm64, container-native-virtualization/pr-helper-rhel9@sha256:d712ec25c980df63dd01b8c0ef2238bccdeea11f275cb37b268b93a1d33d7885_arm64
Red Hatcontainer-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:445b5051f7a102f622a8afb85b983de5ec9265df2d7f440645eed011556bf86d_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:445b5051f7a102f622a8afb85b983de5ec9265df2d7f440645eed011556bf86d_arm64, container-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:445b5051f7a102f622a8afb85b983de5ec9265df2d7f440645eed011556bf86d_arm64, container-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:445b5051f7a102f622a8afb85b983de5ec9265df2d7f440645eed011556bf86d_arm64
Red Hatcontainer-native-virtualization/aaq-operator-rhel9@sha256:a3503890693f678cfe2aa10a1654f457acc09256b526c1cdbbe16e3dcad25e36_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/aaq-operator-rhel9@sha256:a3503890693f678cfe2aa10a1654f457acc09256b526c1cdbbe16e3dcad25e36_arm64, *, *
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:bfd35d9a41ec1299a2fb731c7bc59fa3e29f99a2adb5f35b6c0b1de3dc6d4e81_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/hostpath-csi-driver-rhel9@sha256:bfd35d9a41ec1299a2fb731c7bc59fa3e29f99a2adb5f35b6c0b1de3dc6d4e81_arm64, container-native-virtualization/hostpath-csi-driver-rhel9@sha256:bfd35d9a41ec1299a2fb731c7bc59fa3e29f99a2adb5f35b6c0b1de3dc6d4e81_arm64, *
Red Hatcontainer-native-virtualization/virt-operator-rhel9@sha256:1182f8951898638640a5aaa814a73d2ec2c0b8c7a64ef08e35645af07faee300_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/virt-operator-rhel9@sha256:1182f8951898638640a5aaa814a73d2ec2c0b8c7a64ef08e35645af07faee300_arm64, container-native-virtualization/virt-operator-rhel9@sha256:1182f8951898638640a5aaa814a73d2ec2c0b8c7a64ef08e35645af07faee300_arm64, container-native-virtualization/virt-operator-rhel9@sha256:1182f8951898638640a5aaa814a73d2ec2c0b8c7a64ef08e35645af07faee300_arm64
Red Hatcontainer-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64, container-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64, container-native-virtualization/virt-cdi-cloner-rhel9@sha256:adfed48ee7a200bd22b934b9309af86225929df71a62bfcf4d8d988a95bcdf89_arm64
Red Hatcontainer-native-virtualization/libguestfs-tools-rhel9@sha256:4a2574eed528c317bcf72f66d39095acc92ffc50512e6cc1eafd75612359d193_amd64 as a component of CNV 4.16 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:a6a3b762cc76e331da48b4296b27140181b83ad5fe001cd862c6da135ed32bb2_arm64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:a6a3b762cc76e331da48b4296b27140181b83ad5fe001cd862c6da135ed32bb2_arm64, *, *
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:f5480efb2f5da13c597cdb980ecac06a823091f8ef71a953fdad2c65dd881587_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/hostpath-csi-driver-rhel9@sha256:f5480efb2f5da13c597cdb980ecac06a823091f8ef71a953fdad2c65dd881587_amd64, container-native-virtualization/hostpath-csi-driver-rhel9@sha256:f5480efb2f5da13c597cdb980ecac06a823091f8ef71a953fdad2c65dd881587_amd64, container-native-virtualization/hostpath-csi-driver-rhel9@sha256:f5480efb2f5da13c597cdb980ecac06a823091f8ef71a953fdad2c65dd881587_amd64
Red Hatcontainer-native-virtualization/wasp-agent-rhel9@sha256:990b779243237d87acffc1101512776611f21d25c6142ce06e50c73f49b16496_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/wasp-agent-rhel9@sha256:990b779243237d87acffc1101512776611f21d25c6142ce06e50c73f49b16496_amd64, container-native-virtualization/wasp-agent-rhel9@sha256:990b779243237d87acffc1101512776611f21d25c6142ce06e50c73f49b16496_amd64, container-native-virtualization/wasp-agent-rhel9@sha256:990b779243237d87acffc1101512776611f21d25c6142ce06e50c73f49b16496_amd64
Red Hatcontainer-native-virtualization/virtio-win-rhel9@sha256:8f4906d234e901547693013c16d455e464fe61072b8d0d4339b0acc30a8ed48a_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/virtio-win-rhel9@sha256:8f4906d234e901547693013c16d455e464fe61072b8d0d4339b0acc30a8ed48a_amd64, container-native-virtualization/virtio-win-rhel9@sha256:8f4906d234e901547693013c16d455e464fe61072b8d0d4339b0acc30a8ed48a_amd64, container-native-virtualization/virtio-win-rhel9@sha256:8f4906d234e901547693013c16d455e464fe61072b8d0d4339b0acc30a8ed48a_amd64
Red Hatcontainer-native-virtualization/kubevirt-console-plugin-rhel9@sha256:50fcdb03e9360665ec7d7958a292c92fa4dd00c557a5bdff29de109a13b0dcb2_amd64 as a component of CNV 4.16 for RHEL 9container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:50fcdb03e9360665ec7d7958a292c92fa4dd00c557a5bdff29de109a13b0dcb2_amd64, container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:50fcdb03e9360665ec7d7958a292c92fa4dd00c557a5bdff29de109a13b0dcb2_amd64, *

…and 196 more

Timeline

  • Jul 10, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 16, 2026 CVE Updated

References

…and 172 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›