HIGH
RHACM: unauthenticated SSRF in console API endpoint
Published Jan 11, 2023
7.8
HIGHCVSS 3.1
EPSS 0.23%
Description
RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.
Affected products
No data.
- 2.0
No data.
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/console-rhel8
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/console-rhel8 | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://access.redhat.com/security/cve/CVE-2022-3841 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2139426 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43181 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-3841
- https://www.cve.org/CVERecord?id=CVE-2022-3841
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jan 11, 2023
Updated Apr 9, 2025
Reserved Nov 2, 2022
Link CVE-2022-3841
CISA Vulnrichment
Updated Apr 9, 2025
GitHub
No data