Known vulnerabilities in tfm-rubygem-katello (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:tfm-rubygem-katello_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tfm-rubygem-katello (Red Hat package) tfm-rubygem-katello (Red Hat package) is affected by 7 known vulnerabilities: 5 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31163
CWE-22 Medium
No
No
4.3.0.50-1.el7sat 31.10.2022 SB2022103147
SB2022103161
SB2022072942
and 6 more
#VU64862 - Improper input validation
CVE-2022-30122
CWE-20 Medium
No
No
4.3.0.50-1.el7sat 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more
#VU62794 - Unprotected Transport of Credentials
CVE-2021-27023
CWE-523 Medium
No
No
4.1.1.55-1.el7sat 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU62793 - Resource Management Errors
CVE-2021-27025
CWE-399 Low
No
No
4.1.1.55-1.el7sat 04.05.2022 SB2022050414
SB2022050430
SB2022060135
and 5 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790
CWE-444 Medium
No
No
3.18.1.55-1.el7sat 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU61248 - Improper Authentication
CVE-2021-4142
CWE-287 Medium
No
No
4.1.1.48-1.el7sat 10.03.2022 SB2022031037
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290
CWE-312 Low
No
No
4.1.1.42-1.el7sat 01.04.2021 SB2021020813
SB2021040626
SB2021050706
and 42 more