RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.
History

Sun, 08 Sep 2024 18:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8

Mon, 19 Aug 2024 22:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2023-01-11T20:38:19.315Z

Updated: 2024-08-03T01:20:58.628Z

Reserved: 2022-11-02T16:25:30.673Z

Link: CVE-2022-3841

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-13T06:15:11.277

Modified: 2024-11-21T07:20:20.710

Link: CVE-2022-3841

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-11-02T00:00:00Z

Links: CVE-2022-3841 - Bugzilla