Known vulnerabilities in Trusted Artifact Signer (RHTAS)
Vendor:
Red Hat Inc.
Software:
Trusted Artifact Signer (RHTAS)
Software CPE:
cpe:2.3:a:red_hat:trusted_artifact_signer:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118764 - Deserialization of Untrusted Data CVE-2025-49655 |
CWE-502 | Medium | 1.3.1 | 25.11.2025 |
SB2025112574 SB2025112575 SB2025121832 |
||
| #VU117644 - Allocation of Resources Without Limits or Throttling CVE-2025-12044 |
CWE-770 | Medium | 1.3.1 | 24.10.2025 |
SB2025102442 SB2025112573 |
||
| #VU117641 - Authentication Bypass Using an Alternate Path or Channel CVE-2025-11621 |
CWE-288 | Medium | 1.3.1 | 24.10.2025 |
SB2025102442 SB2025112573 |