Known vulnerabilities in openshift-ansible (Red Hat package) - page 9

Vendor: Red Hat Inc.

Software: openshift-ansible (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 223

Public exploits: 17

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (223)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU61439 - Improper Control of Generation of Code ('Code Injection') CVE-2022-0811	CWE-94	Medium	No	No	4.6.0-202202251050.p0.g87e9f0c.assembly.stream.el7, 4.8.0-202203100145.p0.gfccb320.assembly.stream.el7	17.03.2022	SB2022031714 SB2022031723 SB2022032225 and 12 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0711	CWE-835	Medium	No	No	4.8.0-202203240836.p0.gfccb320.assembly.stream.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	14.03.2022	SB2022031420 SB2022031505 SB2022032910 and 8 more
#VU60644 - Exposure of sensitive information to an unauthorized actor CVE-2022-25184	CWE-200	Low	No	No	3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	16.02.2022	SB2022021609 SB2022032826 SB2022032910 and 4 more
#VU60642 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25175	CWE-78	Medium	No	No	3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	16.02.2022	SB2022021608 SB2022032826 SB2022032910 and 4 more
#VU60639 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25181	CWE-94	Medium	No	No	3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60638 - UNIX Symbolic Link (Symlink) Following CVE-2022-25178	CWE-61	Medium	No	No	3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60637 - UNIX Symbolic Link (Symlink) Following CVE-2022-25177	CWE-61	Medium	No	No	3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60633 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25173	CWE-78	Medium	No	No	3.11.685-1.git.0.a9090ac.el7, 4.9.0-202203150226.p0.g8abf85e.assembly.stream.el7	16.02.2022	SB2022021606 SB2022032826 SB2022032910 and 4 more
#VU60527 - Resource exhaustion CVE-2021-43859	CWE-400	Medium	No	No	3.11.685-1.git.0.a9090ac.el7	11.02.2022	SB2022021102 SB2022021103 SB2022042250 and 26 more
#VU59583 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-20617	CWE-78	Medium	No	No	3.11.634-1.git.0.86bbe6f.el7	13.01.2022	SB2022011311 SB2022021019 SB2022021637 and 5 more
#VU59576 - Cross-Site Request Forgery (CSRF) CVE-2022-20612	CWE-352	Low	No	No	3.11.634-1.git.0.86bbe6f.el7	13.01.2022	SB2022011305 SB2022021019 SB2022021637 and 6 more
#VU57988 - Missing Authorization CVE-2021-21695	CWE-862	High	No	No	3.11.569-1.git.0.9620ba1.el7	08.11.2021	SB2021110805 SB2021110806 SB2021112915 and 4 more
#VU57986 - Improper Authorization CVE-2021-21693	CWE-285	High	No	No	3.11.569-1.git.0.9620ba1.el7	08.11.2021	SB2021110805 SB2021110806 SB2021112915 and 4 more
#VU57984 - Missing Authorization CVE-2021-21691	CWE-862	High	No	No	3.11.569-1.git.0.9620ba1.el7	08.11.2021	SB2021110805 SB2021110806 SB2021112915 and 4 more
#VU57980 - Missing Authorization CVE-2021-21687	CWE-862	Medium	No	No	3.11.569-1.git.0.9620ba1.el7	08.11.2021	SB2021110805 SB2021110806 SB2021112915 and 4 more
#VU57978 - Missing Authorization CVE-2021-21685	CWE-862	High	No	No	3.11.569-1.git.0.9620ba1.el7	08.11.2021	SB2021110805 SB2021110806 SB2021112915 and 4 more
#VU56829 - Improper input validation CVE-2021-29923	CWE-20	Medium	No	No	4.9.0-202202111950.p0.g4d833d3.assembly.stream.el7	22.09.2021	SB2021092225 SB2021092226 SB2021100408 and 37 more
#VU56401 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-40346	CWE-444	Medium	Available	No	4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7	08.09.2021	SB2021090813 SB2021090814 SB2021111101 and 11 more
#VU55970 - Improper input validation CVE-2021-39241	CWE-20	Medium	No	No	4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7	18.08.2021	SB2021081816 SB2021081819 SB2021111101 and 7 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-36221	CWE-362	Medium	No	No	4.9.0-202202111950.p0.g4d833d3.assembly.stream.el7	10.08.2021	SB2021081001 SB2021081217 SB2021081219 and 32 more

Showing elements 161 - 180 out of 223

Known vulnerabilities in openshift-ansible (Red Hat package) - page 9

Breakdown by Severity Chart

Vulnerabilities (223)

Please verify you're human