Paper/Archive/CVE-2022-4039

CVE-2022-4039

Red Hat RHEL-8 based Middleware Containers — Rhsso-container-image: unsecured management interface exposed to adjecent network

EPSS 0.8%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 56.3.563 × 2011.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Affected

ProductAffectedFixed inSource

RHEL-8 based Middleware Containerssee advisory7.6-20CNA

Red Hat Single Sign-On 7see advisory–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

redhat (CNA)8.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryaccess.redhat.com/errata/RHSA-2023:1047 refaccess.redhat.com/security/cve/CVE-2022-4039 refbugzilla.redhat.com/show_bug.cgi?id=2143416