Known vulnerabilities in openshift-ansible (Red Hat package) - page 10

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 223
Public exploits: 17
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 223 known vulnerabilities: 18 high, 139 medium, 66 low Critical High Medium Low

Vulnerabilities (223)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57991 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21698
CWE-22 Medium
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110804
SB2021112915
SB2021113017
and 3 more
#VU57990 - Missing Authorization
CVE-2021-21697
CWE-862 High
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57989 - Protection Mechanism Failure
CVE-2021-21696
CWE-693 Medium
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57987 - Permissions, Privileges, and Access Controls
CVE-2021-21694
CWE-264 High
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57985 - Missing Authorization
CVE-2021-21692
CWE-862 High
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57983 - Protection Mechanism Failure
CVE-2021-21690
CWE-693 High
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57982 - Missing Authorization
CVE-2021-21689
CWE-862 High
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57981 - Missing Authorization
CVE-2021-21688
CWE-862 Medium
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU57979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21686
CWE-22 Medium
No
No
3.11.569-1.git.0.9620ba1.el7 08.11.2021 SB2021110805
SB2021110806
SB2021112915
and 4 more
#VU56902 - Permissions, Privileges, and Access Controls
CVE-2021-25741
CWE-264 Medium
Available
No
3.11.524-1.git.0.150f8a9.el7 28.09.2021 SB2021092804
SB2021092805
SB2021092913
and 8 more
#VU55143 - Integer overflow
CVE-2021-33909
CWE-190 Low
Available
No
4.7.0-202107070256.p0.git.e1b19c2.assembly.stream.el7 21.07.2021 SB2021072106
SB2021072222
SB2021072223
and 63 more
#VU55034 - Uncontrolled Memory Allocation
CVE-2021-33910
CWE-789 Low
Available
No
4.7.0-202107070256.p0.git.e1b19c2.assembly.stream.el7 20.07.2021 SB2021072031
SB2021072032
SB2021072206
and 31 more
#VU54492 - Session Fixation
CVE-2021-21671
CWE-384 Medium
No
No
4.6.0-202108202025.p0.git.4ec6967.assembly.stream.el7, 4.8.0-202109241839.p0.git.4bb45f8.assembly.stream.el7 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU54491 - Permissions, Privileges, and Access Controls
CVE-2021-21670
CWE-264 Low
No
No
4.6.0-202108202025.p0.git.4ec6967.assembly.stream.el7, 4.8.0-202109241839.p0.git.4bb45f8.assembly.stream.el7 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU52502 - Improper input validation
CVE-2020-27218
CWE-20 Medium
No
No
3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU52492 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-21642
CWE-611 Medium
No
No
3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52385 - Improper input validation
CVE-2020-27223
CWE-20 Medium
Available
No
3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU48977 - Information Exposure Through Log Files
CVE-2020-8564
CWE-532 Low
No
No
3.11.501-1.git.0.5ea39b1.el7 07.12.2020 SB2020121507
SB2020121509
SB2020121808
and 6 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
3.11.462-1.git.0.53e69e6.el7, 4.5.0-202106011407.p0.git.83db419.el7 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU34052 - Resource exhaustion
CVE-2020-8557
CWE-400 Low
No
No
3.11.542-1.git.0.ee1d12e.el7 23.07.2020 SB2020072349
SB2020082409
SB2021110213
and 2 more


Showing elements 181 - 200 out of 223