CVE-2022-0552CWE-444

CVE-2022-0552: falha em origin-aggregated-logging/elasticsearch

Publicada em 11 abr 2022 · Atualizada em 02 ago 2024

Seguir esta CVE + Monitorar origin-aggregated-logging/elasticsearch

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.2%

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.

Produtos afetados

n/a · origin-aggregated-logging/elasticsearch

Referências

https://access.redhat.com/security/cve/CVE-2021-21409 https://bugzilla.redhat.com/show_bug.cgi?id=2052539 https://github.com/openshift/origin-aggregated-logging/commit/d6b72d6c32e7c06b65324294d10406546734004d