Vulnerabilidades de openshift gitops 1.14 (CVE)

Registros CVE publicados para openshift gitops 1.14, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados
8.2Alta
CVE-2024-13484

Openshift-gitops-operator-container: namespace isolation break

gitops-operator; Red Hat Red Hat OpenShift GitOps 1.14; Red Hat Red Hat OpenShift GitOps 1.15; Red Hat Red Hat OpenShift GitOps 1.16

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on …