CVE-2022-4039

Summary

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Affected Software

Weaknesses

• CWE-276: Incorrect Default Permissions

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/errata/RHSA-2023:1047
• https://access.redhat.com/security/cve/CVE-2022-4039
• https://bugzilla.redhat.com/show_bug.cgi?id=2143416

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://access.redhat.com/errata/RHSA-2023:1047
• https://access.redhat.com/security/cve/CVE-2022-4039
• https://bugzilla.redhat.com/show_bug.cgi?id=2143416

• ←Previous
• Next→