RHINT Service Registry 2.5.4 GA vulnerabilities

2 known vulnerabilities in RHINT Service Registry 2.5.4 GA from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat build of Quarkus 2.13.8.Final: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-1584Oct 4, 2023Red Hat

  A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an insecure HTTP protocol is used, which can allow attackers to access sensitive user data directly from the ID token or by using the access token

• 8.1 High severity

  Openshift Serverless 1 on RHEL 8: Incorrect Authorization

  CVE-2023-4853Sep 20, 2023Red HatEPSS 2.28%

  A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy alt