Advanced Cluster Security vulnerabilities

2 known vulnerabilities in Advanced Cluster Security from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Red Hat OpenShift Container Platform 4.18: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-0406Apr 6, 2024Red Hat

  A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with

• 8.8 High severity

  Red Hat Advanced Cluster Security for Kubernetes: Exposure of Resource to Wrong Sphere

  CVE-2022-1902Sep 1, 2022Red Hat Advanced Cluster Security for KubernetesEPSS 1.4%

  A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate