Red Hat Advanced Cluster Security 3 vulnerabilities

3 known vulnerabilities in Red Hat Advanced Cluster Security 3 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.9 High severity

  Red Hat Advanced Cluster Security 3: Improper Neutralization of Input During Web Page Generation

  CVE-2022-4975Jan 27, 2025Red Hat

  A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end generates a DOM table-element (id="pdf-table"). This information i

• 8.3 High severity

  OADP-1.3-RHEL-9: Improper Validation of Integrity Check Value

  CVE-2024-3727May 14, 2024Red HatEPSS 1.28%

  A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

• 7.8 High severity

  Red Hat OpenShift Container Platform 4.18: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-0406Apr 6, 2024Red Hat

  A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with