Red Hat Red Hat OpenShift Container Platform 4.12

• CVE-2024-9676 Medium 6.5 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 1.3%
• CVE-2024-9675 High 7.8 Buildah: buildah allows arbitrary directory mount 0.4%
• CVE-2024-9341 Medium 5.4 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 1.0%
• CVE-2024-45496 Critical 9.9 Openshift-controller-manager: elevated build pods can lead to node compromise in openshift 1.0%
• CVE-2024-7387 Critical 9.1 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy 2.3%
• CVE-2024-6508 High 8.0 Openshift-console: oauth2 insufficient state parameter entropy 0.7%
• CVE-2024-5154 High 8.1 Cri-o: malicious container can create symlink on host 1.2%
• CVE-2024-5037 High 7.5 Openshift/telemeter: iss check during jwt authentication can be bypassed 0.8%
• CVE-2024-3154 High 7.2 Cri-o: arbitrary command injection via pod annotation 1.4%
• CVE-2024-1139 High 7.7 Cluster-monitoring-operator: credentials leak 0.9%
• CVE-2023-6596 High 7.5 Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325) 0.8%
• CVE-2024-1394 High 7.5 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 1.5%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2023-5408 High 7.2 Openshift: modification of node role labels 1.5%
• CVE-2022-4318 High 7.8 Cri-o: /etc/passwd tampering privesc 0.3%
• CVE-2023-1260 High 8.0 Kube-apiserver: privesc 1.6%
• CVE-2022-3466 Medium 4.8 Cri-o: security regression of cve-2022-27652 0.2%