CVE-2022-3248

概要

参考情報

• access.redhat.com/security/cve/CVE-2022-3248 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

advanced cluster management for kubernetes のその他の脆弱性

• CVE-2026-71846中 6.5A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and w…
• CVE-2026-71845高 7.7A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes, including CCX_TOKE…
• CVE-2026-71475中 6.8A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights AP…
• CVE-2026-71474高 7.1A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cl…
• CVE-2026-44495高 7.7Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollutio…