Known vulnerabilities in Cluster Observability Operator

Vendor: Red Hat Inc.
Software: Cluster Observability Operator
Software CPE: cpe:2.3:a:red_hat:cluster_observability_operator:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cluster Observability Operator Cluster Observability Operator is affected by 7 known vulnerabilities: 6 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104		 CWE-532 Low
No
No
 0.4.1 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 0.4.1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 0.4.1 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 0.4.1 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 0.4.1 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 0.4.1 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 0.4.1 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more