RedHat Alert
2948Warning Date
Severity Level
Warning Number
Target Sector
6 March, 2023
● Critical
2023-5488
All
Redhat has released security updates to address multiple vulnerabilities in the following products:
- OpenShift Developer Tools and Services 4.12 x86_64
- OpenShift Developer Tools and Services 4.12 s390x
- OpenShift Developer Tools and Services 4.12 ppc64le
- OpenShift Developer Tools and Services 4.12 aarch64
An attacker could exploit these vulnerabilities by doing the following:
- Sandbox Bypass
- CSRF Protection Bypass
- Java Unsafe Deserialization
- Stored XSS
- Sensitive Information Disclosure
- Improper Authorization
The CERT team encourages users to review RedHat security advisory and update the affected products:
- https://access.redhat.com/errata/RHSA-2023:1064