Use of a broken or risky cryptographic algorithm in Microsoft Windows and Windows Server - CVE-2024-3596

Vulnerability identifier: #VU94063

CSH Severity: Medium

CVSS v4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-3596

CWE-ID: CWE-327

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to use of a broken or risky cryptographic algorithm in RADIUS Protocol. A remote user can perform a man-in-the-middle (MitM) attack and gain access to target system.

Microsoft Windows
Windows Server
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
F5OS
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
Anolis OS
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Palo Alto PAN-OS
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Server Applications Module
openSUSE Leap
openEuler
Fedora
ArubaOS (AOS)
Junos OS
Junos OS Evolved
Aruba CX 10000 Switch Series
Aruba CX 9300 Switch Series
Aruba CX 8400 Switch Series
Aruba CX 8360 Switch Series
Aruba CX 8325 Switch Series
Aruba CX 8320 Switch Series
Aruba CX 6400 Switch Series
Aruba CX 6300 Switch Series
Aruba CX 6200F Switch Series
Aruba CX 6100 Switch Series
Aruba CX 6000 Switch Series
Aruba CX 4100i Switch Series
FortiProxy
AirWave Management Platform
Aruba Fabric Composer
DataStax Hyper-Converged Database
Cloud Pak for Network Automation
Guardium Data Security Center (GDSC)
IBM Cloud Pak for Watson AIOps
Oracle Communications Operations Monitor
ClearPass Policy Manager
IBM QRadar Incident Forensics
Robotic Process Automation for Cloud Pak
Submariner
IBM Concert Software
Consul
IBM Automation Decision Services
IBM Observability with Instana
Service Interconnect
Multicluster GlobalHub
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift Dev Spaces
Red Hat Advanced Cluster Security for Kubernetes
Kube Descheduler Operator for Red Hat OpenShift
OpenShift Logging
Session Smart Router
App Connect Enterprise Certified Container
Red Hat OpenStack
IBM Edge Application Manager
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
LANTIME Operating System Firmware (LTOS)
BIG-IP
ArubaOS-CX (AOS-CX)
Junos cRPD
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libk5crypto3 (Ubuntu package)
libkrad0 (Ubuntu package)
krb5 (Red Hat package)
libkadm5
krb5-workstation
krb5-server-ldap
krb5-server
krb5-pkinit
krb5-libs
krb5-devel
krb5-doc
krb5
krb5-client
krb5-debuginfo
krb5-debugsource
krb5-help
freeradius-server-perl-debuginfo
freeradius-server-sqlite-debuginfo
freeradius-server-debuginfo
freeradius-server-debugsource
freeradius-server-utils-debuginfo
freeradius-server-python-debuginfo
freeradius-server-postgresql-debuginfo
freeradius-server-mysql
freeradius-server-ldap-debuginfo
freeradius-server-libs-debuginfo
freeradius-server-krb5-debuginfo
freeradius-server-libs
freeradius-server-ldap
freeradius-server-doc
freeradius-server-utils
freeradius-server-python
freeradius-server-mysql-debuginfo
freeradius-server-perl
freeradius-server-krb5
freeradius-server-sqlite
freeradius-server
freeradius-server-devel
freeradius-server-postgresql
freeradius (Ubuntu package)
freeradius-mysql
freeradius-perl
freeradius-python
freeradius-sqlite
freeradius-unixODBC
freeradius-utils
freeradius-postgresql
freeradius
freeradius-devel
freeradius-doc
freeradius-krb5
freeradius-ldap
freeradius (Red Hat package)
python3-freeradius
freeradius-rest
freeradius-server-python3-debuginfo
freeradius-server-python3
freeradius-debugsource
freeradius-debuginfo
freeradius-help
freeradius-server-ldap-schemas
BIG-IP APM
Oracle Communications Cloud Native Core Console
OpenShift API for Data Protection (OADP)
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Qradar SIEM
RSA Authentication Manager
IBM CICS TX Advanced

Install updates from vendor's website.

Microsoft Windows - addressed in versions 10 21H2 10.0.19044.4651, 10 22H2 10.0.19045.4651, 10 1507 10.0.10240.20710, 10 1607 10.0.14393.7159, 10 1809 10.0.17763.6054, 11 21H2 10.0.22000.3079, 11 22H2 10.0.22621.3880, 11 23H2 10.0.22631.3880
Windows Server - addressed in versions 2008 R2 6.1.7601.27219, 2008 6.0.6003.22769, 2012 R2 6.3.9600.22074, 2012 6.2.9200.24975, 2016 10.0.14393.7159, 2022 10.0.20348.2582
Submariner - addressed in versions 0.16.8, 0.18.5
IBM Concert Software - update to 1.0.5
Consul - update to 1.20.2
DataStax Hyper-Converged Database - update to 1.2.5
Cloud Pak for Network Automation - update to 2.7.8
Guardium Data Security Center (GDSC) - addressed in versions 3.6.1, 3.8.5
IBM Cloud Pak for Watson AIOps - update to 4.10.0
FortiProxy - update to 7.4.6
LANTIME Operating System Firmware (LTOS) - update to 7.08.016
Palo Alto PAN-OS - addressed in versions 9.1.19, 10.1.14, 10.2.10, 11.0.4-h4, 11.1.3
IBM Automation Decision Services - update to 24.0.0.0.4
IBM Observability with Instana - update to 291
libk5crypto3 (Ubuntu package) - addressed in versions Ubuntu Pro, libkrad0, 1.17-6ubuntu4.8, 1.19.2-2ubuntu0.5, 1.20.1-6ubuntu2.3, 1.21.3-3ubuntu0.1
libkrad0 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.17-6ubuntu4.8, 1.19.2-2ubuntu0.5, 1.20.1-6ubuntu2.3, 1.21.3-3ubuntu0.1
Service Interconnect - addressed in versions 1, 1.4
Multicluster GlobalHub - update to 1.2.1
OpenShift API for Data Protection (OADP) - addressed in versions 1.3.4, 1.4.2
Migration Toolkit for Containers - update to 1.8.5
krb5 (Red Hat package) - addressed in versions 1.15.1-55.el7_9.3, 1.17-19.el8_2.2, 1.18.2-9.el8_4.2, 1.18.2-16.el8_6.2, 1.18.2-26.el8_8.3, 1.18.2-30.el8_10, 1.19.1-16.el9_0.2, 1.20.1-9.el9_2.2, 1.21.1-2.el9_4.1, 1.21.1-4.el9_5
libkadm5 - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-workstation - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-server-ldap - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-server - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-pkinit - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-libs - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-devel - addressed in versions 1.15.1-55.0.2, 1.18.2-30.0.1
krb5-doc - update to 1.18.2-30.0.1
krb5 - update to 1.21.2-11
krb5-client - update to 1.21.2-11
krb5-debuginfo - update to 1.21.2-11
krb5-debugsource - update to 1.21.2-11
krb5-help - update to 1.21.2-11
krb5-server - update to 1.21.2-11
krb5-libs - update to 1.21.2-11
krb5-devel - update to 1.21.2-11
krb5 - addressed in versions 1.21.3-2.fc39, 1.21.3-2.fc40, 1.21.3-3.fc41
Multicluster Engine for Kubernetes - addressed in versions 2.3.8, 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4
OpenShift Service Mesh - update to 2.5.6
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.8, 2.9.6, 2.10.7, 2.10.8, 2.11.4, 2.11.7, 2.12.0, 2.12.1, 2.12.3
freeradius-server-perl-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-sqlite-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-debugsource - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-utils-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-python-debuginfo - update to 3.0.19-3.15.1
freeradius-server-postgresql-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-mysql - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-ldap-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-libs-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-krb5-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-libs - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-ldap - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-doc - addressed in versions 3.0.19-3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-utils - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-python - update to 3.0.19-3.15.1
freeradius-server-mysql-debuginfo - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-perl - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-krb5 - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-sqlite - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-devel - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-postgresql - addressed in versions 3.0.19-3.15.1, 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius (Ubuntu package) - addressed in versions 3.0.20+dfsg-3ubuntu0.4, 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 3.2.5+dfsg-3~ubuntu24.04.1
freeradius-mysql - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-perl - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-python - update to 3.0.20-1
freeradius-sqlite - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-unixODBC - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-utils - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-postgresql - addressed in versions 3.0.20-1, 3.0.20-15
freeradius - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-devel - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-doc - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-krb5 - addressed in versions 3.0.20-1, 3.0.20-15
freeradius-ldap - addressed in versions 3.0.20-1, 3.0.20-15
freeradius (Red Hat package) - addressed in versions 3.0.20-1.el7_9.1, 3.0.21-26.el9_0.1, 3.0.21-38.el9_2.2, 3.0.21-40.el9_4
python3-freeradius - update to 3.0.20-15
freeradius-rest - update to 3.0.20-15
freeradius-server-python3-debuginfo - addressed in versions 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-server-python3 - addressed in versions 3.0.21-150200.3.15.1, 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius-debugsource - update to 3.0.25-3
freeradius - update to 3.0.25-3
freeradius-debuginfo - update to 3.0.25-3
freeradius-devel - update to 3.0.25-3
freeradius-help - update to 3.0.25-3
freeradius-krb5 - update to 3.0.25-3
freeradius-ldap - update to 3.0.25-3
freeradius-mysql - update to 3.0.25-3
freeradius-perl - update to 3.0.25-3
freeradius-postgresql - update to 3.0.25-3
freeradius-sqlite - update to 3.0.25-3
freeradius-utils - update to 3.0.25-3
python3-freeradius - update to 3.0.25-3
freeradius-server-ldap-schemas - addressed in versions 3.0.25-150400.4.7.1, 3.2.4-150600.3.3.2
freeradius - update to 3.2.5-1.fc39
Red Hat OpenShift Dev Spaces - update to 3.17.0
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 4.4.6, 4.5.5
OpenShift Virtualization - addressed in versions 4.12.15, 4.13.11
Red Hat OpenShift Container Platform - addressed in versions 4.12.68, 4.13.53, 4.14.40, 4.14.41, 4.15.38, 4.16.23, 4.16.24, 4.16.44, 4.17.5
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.14.13, 4.15.9, 4.16.4, 4.17.1
Kube Descheduler Operator for Red Hat OpenShift - update to 5.0.2
OpenShift Logging - addressed in versions 5.8.16, 5.8.17, 5.8.19, 5.8.20, 5.9.10, 5.9.14
Session Smart Router - addressed in versions 6.2.10, 6.3.7
ClearPass Policy Manager - addressed in versions 6.11.9, 6.12.2
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF02
IBM QRadar Incident Forensics - update to 7.5.0 UP10 IF02
AirWave Management Platform - update to 8.3.0.3
RSA Authentication Manager - addressed in versions 8.6 Patch 4 Hotfix 1, 8.7 Patch 4 Hotfix 1, 8.7 SP1 Patch 3 Hotfix 1, 8.7 SP2 Patch 3
ArubaOS (AOS) - addressed in versions 8.10.0.14, 8.12.0.2, 10.4.1.4, 10.6.0.3
IBM CICS TX Advanced - update to 10.1.0.0 ifix37
ArubaOS-CX (AOS-CX) - addressed in versions 10.10.1140, 10.13.1040, 10.14.1010
App Connect Enterprise Certified Container - update to 12.8.0
Red Hat OpenStack - update to 16.2
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.20, 23.0.20
Junos OS - addressed in versions 21.4R3-S11, 22.2R3-S7, 22.4R3-S7, 23.2R2-S4, 23.4R2-S5, 24.2R2-S1, 24.4R1-S3, 24.4R2, 25.2R1
Junos cRPD - addressed in versions 23.4R2-S3, 24.2R2, 24.4R1
Junos OS Evolved - addressed in versions 23.4R2-S5-EVO, 24.2R2-S1-EVO, 24.4R1-S3-EVO, 24.4R2-EVO, 25.1R1-EVO

• Exploit #10199 - CVE-2024-3596-Detector (July 12, 2024)

• https://datatracker.ietf.org/doc/html/rfc2865
• https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/
• https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf
• https://www.blastradius.fail/

• Use of a broken or risky cryptographic algorithm in Microsoft products
• SUSE update for freeradius-server
• SUSE update for freeradius-server
• SUSE update for freeradius-server
• SUSE update for freeradius-server
• Fedora 39 update for freeradius
• Use of a broken or risky cryptographic algorithm in Palo Alto Networks PAN-OS
• openEuler update for freeradius
• Red Hat Enterprise Linux 8 update for the freeradius:3.0 module
• Red Hat Enterprise Linux 9 update for freeradius
• Red Hat Enterprise Linux 8 update for the freeradius:3.0 module
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for freeradius
• Red Hat Enterprise Linux 9 update for freeradius
• Red Hat Enterprise Linux 8 update for the freeradius:3.0 module
• Red Hat Enterprise Linux 9 update for freeradius
• Red Hat Enterprise Linux 8 update for the freeradius:3.0 module
• ArubaOS-CX update for RADIUS
• ArubaOS update for RADIUS
• MitM attack in Aruba Fabric Composer RADIUS protocol
• AirWave Management Platform update for RADIUS
• HPE ClearPass Policy Manager update for RADIUS
• RADIUS authentication bypass in F5 BIG-IP
• RADIUS authentication bypass in F5 F5OS
• RADIUS authentication bypass in Juniper Junos OS and Junos OS Evolved
• Ubuntu update for freeradius
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 9 update for krb5
• Red Hat Enterprise Linux 9 update for krb5
• Fedora 39 update for krb5
• Fedora 40 update for krb5
• Fedora 41 update for krb5
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for krb5
• Red Hat Enterprise Linux 8 update for krb5
• Red Hat Enterprise Linux 8 update for krb5
• Red Hat Enterprise Linux 8 update for krb5
• Red Hat Enterprise Linux 8 update for krb5
• Red Hat Enterprise Linux 8 update for krb5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• MitM attack in FortiProxy RADIUS protocol
• Red Hat Enterprise Linux 9 update for krb5
• Red Hat Enterprise Linux 9 update for krb5
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.4
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• openEuler 24.03 LTS update for krb5
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Service Interconnect 1
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.5
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.0
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.17
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Service Interconnect
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Hashicorp Consul update for third-party components
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Console
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.9
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.4
• Multiple vulnerabilities in Submariner
• Multiple vulnerabilities in Multicluster GlobalHub 1.2
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Ubuntu update for krb5
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in IBM Concert Software
• Anolis OS update for freeradius:3.0 module
• Anolis OS update for freeradius
• Anolis OS update for krb5
• Anolis OS update for krb5
• Anolis OS update for krb5
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Multiple vulnerabilities in Submariner 0.18
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in OpenShift Logging 5.9
• Meinberg LANTIME firmware update for third-party components (October 2024)
• RSA Authentication Manager update for RADIUS protocol vulnerability
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in IBM Automation Decision Services
• Multiple vulnerabilities in IBM Edge Application Manager
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Juniper Session Smart Router update for third-party components
• Multiple vulnerabilities in IBM DataStax Hyper-Converged Database