{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2025-7195", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2025-07-07T08:45:21.278Z", "datePublished": "2025-08-07T19:05:08.756Z", "dateUpdated": "2026-08-25T09:26:09.104Z" }, "containers": { "cna": { "title": "Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd", "metrics": [ { "other": { "content": { "value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/" }, "type": "Red Hat severity rating" } }, { "cvssV3_1": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS" } ], "descriptions": [ { "lang": "en", "value": "Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. \n\nIn affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container." } ], "affected": [ { "vendor": "operator-framework", "product": "operator-sdk", "versions": [ { "status": "affected", "version": "0", "lessThan": "0.15.2", "versionType": "semver" } ], "packageName": "operator-sdk", "collectionURL": "https://github.com/operator-framework/operator-sdk", "defaultStatus": "unaffected" }, { "vendor": "Red Hat", "product": "RHEL-9-CNV-4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17.39-2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:container_native_virtualization:4.17::el9" ] }, { "vendor": "Red Hat", "product": "RHEL-9-CNV-4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18.25-3", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:container_native_virtualization:4.18::el9" ] }, { "vendor": "Red Hat", "product": "RHEL-9-CNV-4.20", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.20.3-3", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:container_native_virtualization:4.20::el9" ] }, { "vendor": "Red Hat", "product": "Compliance Operator 1", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "compliance/openshift-compliance-rhel8-operator", "defaultStatus": "affected", "versions": [ { "version": "1.8.0", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_compliance_operator:1::el9" ] }, { "vendor": "Red Hat", "product": "Compliance Operator 1", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "compliance/openshift-compliance-rhel8-operator", "defaultStatus": "affected", "versions": [ { "version": "1768172669", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_compliance_operator:1::el9" ] }, { "vendor": "Red Hat", "product": "File Integrity Operator 1", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "compliance/openshift-file-integrity-rhel8-operator", "defaultStatus": "affected", "versions": [ { "version": "v1.3", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_file_integrity_operator:1::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/addon-manager-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/discovery-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/placement-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/work-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.6", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.6::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/addon-manager-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/discovery-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/managedcluster-import-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/placement-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/work-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/addon-manager-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/discovery-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/managedcluster-import-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/placement-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/work-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.7", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.7::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/addon-manager-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765872406", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1766360304", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/discovery-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765669648", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/managedcluster-import-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765866268", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/placement-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765872399", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765872402", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765872398", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/work-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1765872400", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.8::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/addon-manager-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/discovery-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/managedcluster-import-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/placement-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-operator-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/registration-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "multicluster-engine/work-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:multicluster_engine:2.9::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.11", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.11::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-application-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.11", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.11::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-channel-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.11", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.11::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-subscription-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.11", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.11::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/acm-cluster-permission-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicloud-integrations-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-application-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-channel-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-subscription-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.12", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/acm-cluster-permission-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1773285089", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicloud-integrations-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1773259164", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-application-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1773259182", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-channel-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1773358651", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-subscription-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1773090513", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.12::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/acm-cluster-permission-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1767569821", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.13::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1767829032", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.13::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/acm-cluster-permission-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1767569821", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.13::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/cluster-backup-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "1767656229", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.13::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1767829032", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.13::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/acm-cluster-permission-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.14", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.14", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicloud-integrations-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.14", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-application-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.14", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-channel-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.14", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-subscription-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v2.14", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicloud-integrations-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1769720041", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-application-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1770343757", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-channel-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1769721579", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "rhacm2/multicluster-operators-subscription-rhel9", "defaultStatus": "affected", "versions": [ { "version": "1770336554", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:acm:2.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178221", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-cli-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178222", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-core-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178236", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178273", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178715", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178261", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-metrics-exporter-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178354", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178419", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178768", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cosi-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178319", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178386", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178406", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178615", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178379", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-must-gather-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178329", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178423", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odr-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764178419", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.14", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/rook-ceph-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.14-1764215448", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.14::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176261", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-core-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176342", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176372", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176892", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176485", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-metrics-exporter-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176698", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176699", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cli-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176675", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764177101", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cosi-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176690", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764221806", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764222436", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764177174", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764177033", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-must-gather-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764176958", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764177101", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odr-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764177020", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.15", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/rook-ceph-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.15-1764177029", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.15::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764168955", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-core-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169118", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169242", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169544", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169347", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-metrics-exporter-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169479", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169526", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cli-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169464", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169687", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cosi-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169457", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169527", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169577", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169730", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169598", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-must-gather-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169623", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764169710", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odr-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764170019", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/rook-ceph-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.16-1764170021", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.16::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764167834", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764167795", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-core-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764167826", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764167876", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168179", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764167987", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-metrics-exporter-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168476", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168475", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cli-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168431", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168662", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cosi-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168475", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168536", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168609", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168731", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168699", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-must-gather-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764168859", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764169063", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odr-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764169125", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.17", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/rook-ceph-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.17-1764169222", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.17::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854289", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/cephcsi-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854280", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-core-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854280", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/mcg-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854319", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761855549", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-client-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854321", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-metrics-exporter-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854422", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/ocs-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854430", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cli-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854457", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854484", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-cosi-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854398", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854494", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854493", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-console-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854504", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-multicluster-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854489", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-must-gather-rhel9", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761855467", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odf-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761854524", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/odr-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1762335558", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "odf4/rook-ceph-rhel9-operator", "defaultStatus": "affected", "versions": [ { "version": "v4.18-1761855234", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.18::el9" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/addon-manager-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel8", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/discovery-rhel8", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/hypershift-addon-rhel8-operator", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/hypershift-addon-rhel9-operator", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/managedcluster-import-controller-rhel8", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/placement-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/registration-operator-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/registration-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-engine/work-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:multicluster_engine" ] }, { "vendor": "Red Hat", "product": "Multicluster Global Hub", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ] }, { "vendor": "Red Hat", "product": "Multicluster Global Hub", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ] }, { "vendor": "Red Hat", "product": "Multicluster Global Hub", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/acm-cluster-permission-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/cert-policy-controller-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/config-policy-controller-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/endpoint-monitoring-rhel9-operator", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/governance-policy-propagator-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/grafana-dashboard-loader-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/iam-policy-controller-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/klusterlet-addon-controller-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/metrics-collector-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/multicloud-integrations-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/multicluster-observability-rhel9-operator", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/multicluster-operators-application-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/multicluster-operators-channel-rhel8", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/rbac-query-proxy-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rhacm2/search-collector-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:acm:2" ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "advanced-cluster-security/rhacs-rhel8-operator", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4" ] }, { "vendor": "Red Hat", "product": "Red Hat build of Apicurio Registry 2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "apicurio/apicurio-registry-rhel8-operator", "defaultStatus": "unknown", "cpes": [ "cpe:/a:redhat:service_registry:2" ] }, { "vendor": "Red Hat", "product": "Red Hat build of Apicurio Registry 3", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "apicurio/apicurio-registry-rhel8-operator", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:apicurio_registry:3" ] }, { "vendor": "Red Hat", "product": "Red Hat Fuse 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "fuse7/fuse-apicurito-rhel8-operator", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:jboss_fuse:7" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "compliance/openshift-compliance-rhel8-operator", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift4/cnf-tests-rhel8", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift4/cnf-tests-rhel9", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift4/lifecycle-agent-operator-bundle", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift4/topology-aware-lifecycle-manager-operator-bundle", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift4/ztp-site-generate-rhel8", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/cluster-network-addons-operator-rhel9", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:container_native_virtualization:4" ] }, { "vendor": "Red Hat", "product": "Red Hat Web Terminal", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "web-terminal/web-terminal-exec-rhel9", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:webterminal:1" ] }, { "vendor": "Red Hat", "product": "Red Hat Web Terminal", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "web-terminal/web-terminal-rhel9-operator", "defaultStatus": "unaffected", "cpes": [ "cpe:/a:redhat:webterminal:1" ] } ], "references": [ { "url": "https://access.redhat.com/errata/RHEA-2025:23406", "name": "RHEA-2025:23406", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHEA-2025:23478", "name": "RHEA-2025:23478", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHEA-2026:0129", "name": "RHEA-2026:0129", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:19332", "name": "RHSA-2025:19332", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:19335", "name": "RHSA-2025:19335", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:19958", "name": "RHSA-2025:19958", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:19961", "name": "RHSA-2025:19961", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:21368", "name": "RHSA-2025:21368", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:21885", "name": "RHSA-2025:21885", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:22415", "name": "RHSA-2025:22415", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:22416", "name": "RHSA-2025:22416", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:22418", "name": "RHSA-2025:22418", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:22420", "name": "RHSA-2025:22420", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:22683", "name": "RHSA-2025:22683", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:22684", "name": "RHSA-2025:22684", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:23528", "name": "RHSA-2025:23528", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:23529", "name": "RHSA-2025:23529", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2025:23542", "name": "RHSA-2025:23542", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2026:0627", "name": "RHSA-2026:0627", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2026:0718", "name": "RHSA-2026:0718", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2026:0722", "name": "RHSA-2026:0722", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2026:0737", "name": "RHSA-2026:0737", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2026:2572", "name": "RHSA-2026:2572", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/errata/RHSA-2026:5633", "name": "RHSA-2026:5633", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ] }, { "url": "https://access.redhat.com/security/cve/CVE-2025-7195", "tags": [ "vdb-entry", "x_refsource_REDHAT" ] }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376300", "name": "RHBZ#2376300", "tags": [ "issue-tracking", "x_refsource_REDHAT" ] } ], "datePublic": "2025-08-07T18:59:00.000Z", "problemTypes": [ { "descriptions": [ { "cweId": "CWE-276", "description": "Incorrect Default Permissions", "lang": "en", "type": "CWE" } ] } ], "x_redhatCweChain": "CWE-276: Incorrect Default Permissions", "workarounds": [ { "lang": "en", "value": "In Red Hat OpenShift Container Platform, the following default configurations reduce the impact of this vulnerability.\n\nSecurity Context Constraints (SCCs): The default SCC, Restricted-v2, applies several crucial security settings to containers. \n\nCapabilities: drop: ALL removes all Linux capabilities, including SETUID and SETGID. This prevents a process from changing its user or group ID, a common step in privilege escalation attacks. The SETUID and SETGID capabilities can also be dropped explicitly if other capabilities are still required.\n\nallowPrivilegeEscalation: false ensures that a process cannot gain more privileges than its parent process. This blocks attempts by a compromised container process to grant itself additional capabilities.\n\nSELinux Mandatory Access Control (MAC): Pods are required to run with a pre-allocated Multi-Category Security (MCS) label. This SELinux feature provides a strong layer of isolation between containers and from the host system. A properly configured SELinux policy can prevent a container escape, even if an attacker gains elevated permissions within the container itself.\n\nFilesystem Hardening: While not a default setting, a common security practice is to set readOnlyRootFilesystem: true in a container's security context. In this specific scenario, this configuration would prevent an attacker from modifying critical files like /etc/passwd, even if they managed to gain file-level write permissions." } ], "timeline": [ { "lang": "en", "time": "2025-07-04T08:54:01.878Z", "value": "Reported to Red Hat." }, { "lang": "en", "time": "2025-08-07T18:59:00.000Z", "value": "Made public." } ], "credits": [ { "lang": "en", "value": "Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue." } ], "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-08-25T09:26:09.104Z" }, "x_generator": { "engine": "cvelib 1.8.0" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2025-08-07T19:23:11.314765Z", "id": "CVE-2025-7195", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-07T19:36:47.691Z" } } ] } }