Known Vulnerabilities for Advanced Cluster Management For Kubernetes by Redhat
Listed below are 8 of the newest known vulnerabilities associated with "Advanced Cluster Management For Kubernetes" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-4740 json | A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Impro... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2023-44487 json | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many stre... | 7.5 - HIGH | 2023-10-10 | 2024-02-02 |
| CVE-2023-3027 json | The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dy... | 7.8 - HIGH | 2023-06-05 | 2023-06-12 |
| CVE-2022-27191 json | The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in c... | 7.5 - HIGH | 2022-03-18 | 2023-11-07 |
| CVE-2022-3841 json | RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the cons... | 7.8 - HIGH | 2023-01-13 | 2023-01-20 |
| CVE-2022-3248 json | A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an at... | 7.5 - HIGH | 2023-10-05 | 2023-11-07 |
| CVE-2022-2238 json | A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in t... | 6.5 - MEDIUM | 2022-09-01 | 2023-11-07 |
| CVE-2020-25688 json | A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned usin... | 3.5 - LOW | 2020-11-23 | 2020-12-08 |
| CVE-2020-25655 json | An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct perm... | 6.5 - MEDIUM | 2020-11-09 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0.6 | |||
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0.5 | |||
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0.4 | |||
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0.3 | |||
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0.2 | |||
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0.1 | |||
| Application | Redhat | Advanced Cluster Management For Kubernetes | 2.0 |