Known vulnerabilities in eap8-apache-sshd (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap8-apache-sshd (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap8-apache-sshd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
8
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU92281 - Improper Authorization CVE-2023-6236 |
CWE-285 | Low | 2.12.1-1.redhat_00001.1.el8eap, 2.12.1-1.redhat_00001.1.el9eap | 19.06.2024 |
SB2024061977 SB2024061978 SB2024061979 and 1 more |
||
| #VU92280 - Information Exposure Through Log Files CVE-2024-1102 |
CWE-532 | Low | 2.12.1-1.redhat_00001.1.el8eap, 2.12.1-1.redhat_00001.1.el9eap | 19.06.2024 |
SB2024061963 SB2024061977 SB2024061978 and 1 more |
||
| #VU92251 - Server-Side Request Forgery (SSRF) CVE-2024-1233 |
CWE-918 | Medium | 2.12.1-1.redhat_00001.1.el8eap, 2.12.1-1.redhat_00001.1.el9eap | 19.06.2024 |
SB2024061932 SB2024061933 SB2024061934 and 4 more |
||
| #VU85304 - Excessive Iteration CVE-2023-4043 |
CWE-834 | Medium | 2.12.0-1.redhat_00001.1.el8eap, 2.12.0-1.redhat_00001.1.el9eap | 11.01.2024 |
SB2024011123 SB2024012646 SB2024020506 and 15 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 2.12.0-1.redhat_00001.1.el8eap, 2.12.0-1.redhat_00001.1.el9eap | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU83849 - Improper Access Control CVE-2023-4503 |
CWE-284 | Medium | 2.12.1-1.redhat_00001.1.el8eap, 2.12.1-1.redhat_00001.1.el9eap | 04.12.2023 |
SB2023120447 SB2023120448 SB2023120449 and 4 more |
||
| #VU81948 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-4759 |
CWE-59 | Medium | 2.12.0-1.redhat_00001.1.el8eap, 2.12.0-1.redhat_00001.1.el9eap | 12.10.2023 |
SB2023101242 SB2023101243 SB2023103012 and 21 more |
||
| #VU81427 - UNIX Symbolic Link (Symlink) Following CVE-2023-35887 |
CWE-61 | Low | 2.12.0-1.redhat_00001.1.el8eap, 2.12.0-1.redhat_00001.1.el9eap | 03.10.2023 |
SB2023100336 SB2023100337 SB2023100453 and 21 more |