openshift4/ose-agent-installer-api-server-rhel8 vulnerabilities
CVEs whose affected-version data names the openshift4/ose-agent-installer-api-server-rhel8 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-3727High· 8.3A flaw was found in the github.com/containers/image library
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
▾ TwilightRed Hat · imageEPSS 1.3%via NVD
CVE-2024-1139High· 7.7A credentials leak vulnerability was found in the cluster monitoring operator in OCP
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.
▾ TwilightRed Hat · cluster-monitoring-operatorEPSS 0.89%via NVD