RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-3841 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Jan 2023, 17:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://access.redhat.com/security/cve/CVE-2022-3841 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Redhat advanced Cluster Management For Kubernetes
Redhat |
|
| CPE | cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.0:*:*:*:*:*:*:* | |
| CWE | CWE-918 |
13 Jan 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-13 06:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-3841
Mitre link : CVE-2022-3841
CVE.ORG link : CVE-2022-3841
JSON object : View
Products Affected
redhat
- advanced_cluster_management_for_kubernetes
CWE
CWE-918
Server-Side Request Forgery (SSRF)