Known vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT) - page 2

Vendor: Red Hat Inc.
Software: Red Hat OpenShift distributed tracing (RHOSDT)
Software CPE: cpe:2.3:a:red_hat:rhosdt:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 74
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift distributed tracing (RHOSDT) Red Hat OpenShift distributed tracing (RHOSDT) is affected by 74 known vulnerabilities: 10 high, 48 medium, 16 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85658 - Insufficient Verification of Data Authenticity
CVE-2023-7008		 CWE-345 Medium
No
No
 3.2.0 22.01.2024 SB2024012238
SB2024012239
SB2024012240
and 38 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 3.1.0 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85552 - Resource exhaustion
CVE-2024-22365		 CWE-400 Low
No
No
 3.2.0 17.01.2024 SB2024011799
SB20240117126
SB2024011839
and 44 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 3.1.0 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU84985 - Out-of-bounds read
CVE-2023-7104		 CWE-125 Medium
No
No
 3.1.0 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 107 more
#VU84540 - Unchecked Return Value
CVE-2023-6918		 CWE-252 Low
No
No
 3.2.0 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 3.1.0 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 3.1.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 3.1.0 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU82552 - Use of Hard-coded Cryptographic Key
CVE-2023-46129		 CWE-321 Medium
No
No
 3.0.0 30.10.2023 SB2023103010
SB2023112001
SB2023112002
and 5 more
#VU81044 - Out-of-bounds read
CVE-2023-39615		 CWE-125 Medium
No
No
 3.1.0 21.09.2023 SB2023092155
SB2023092202
SB2023092203
and 61 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 3.0.0 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 3.1.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 3.1.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 3.1.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 3.1.0 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 3.1.0 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU71458 - Memory corruption
CVE-2023-22745		 CWE-119 High
No
No
 3.0.0 24.01.2023 SB2023012404
SB2023022749
SB2023030333
and 42 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 3.0.0 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 3.2.0 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more


Showing elements 21 - 40 out of 74