Red Hat Alert
2996Warning Date
Severity Level
Warning Number
Target Sector
12 June, 2022
● High
2022-4938
All
Description:
Red Hat has released security updates to address several vulnerabilities in its products, mainly:
- OpenShift Container Platform 4.7.52
- Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform 4.7 for RHEL 7 x86_64
- Red Hat OpenShift Container Platform for Power 4.7 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8 s390x
- Cryostat 2.1.1: new Cryostat on RHEL 8
- Cryostat 2 x86_64
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Cross-site scripting (XSS)
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary update, mainly: