1644 lines
68 KiB
JSON
1644 lines
68 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2025-6020",
|
|
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "redhat",
|
|
"dateReserved": "2025-06-11T22:38:25.643Z",
|
|
"datePublished": "2025-06-17T12:44:08.646Z",
|
|
"dateUpdated": "2026-11-06T01:00:32.143Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"title": "Linux-pam: linux-pam directory traversal",
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"content": {
|
|
"value": "Important",
|
|
"namespace": "https://access.redhat.com/security/updates/classification/"
|
|
},
|
|
"type": "Red Hat severity rating"
|
|
}
|
|
},
|
|
{
|
|
"cvssV3_1": {
|
|
"attackComplexity": "LOW",
|
|
"attackVector": "LOCAL",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "HIGH",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"privilegesRequired": "LOW",
|
|
"scope": "UNCHANGED",
|
|
"userInteraction": "NONE",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
|
"version": "3.1"
|
|
},
|
|
"format": "CVSS"
|
|
}
|
|
],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "1.7.1",
|
|
"versionType": "semver"
|
|
}
|
|
],
|
|
"packageName": "linux-pam",
|
|
"collectionURL": "https://github.com/linux-pam/linux-pam",
|
|
"defaultStatus": "unaffected"
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 10",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.6.1-8.el10",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux:10.1"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.6.1-8.el10_0",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux_eus:10.0"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.1.8-23.el7_9.1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_els:7"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-37.el8_10",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux:8::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-38.el8_10",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:enterprise_linux:8::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-8.el8_2.1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_aus:8.2::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-14.el8_4.1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_aus:8.4::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-16.el8_6.2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_aus:8.6::baseos",
|
|
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
|
|
"cpe:/o:redhat:rhel_tus:8.6::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-16.el8_6.2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_aus:8.6::baseos",
|
|
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
|
|
"cpe:/o:redhat:rhel_tus:8.6::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-16.el8_6.2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_aus:8.6::baseos",
|
|
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
|
|
"cpe:/o:redhat:rhel_tus:8.6::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-26.el8_8.1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
|
|
"cpe:/o:redhat:rhel_tus:8.8::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.3.1-26.el8_8.1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
|
|
"cpe:/o:redhat:rhel_tus:8.8::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-26.el9_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
|
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-25.el9_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
|
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-26.el9_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
|
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-25.el9_6",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
|
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-9.el9_0.2",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_e4s:9.0::appstream",
|
|
"cpe:/o:redhat:rhel_e4s:9.0::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-15.el9_2.1",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
|
|
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
|
|
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
|
"packageName": "pam",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "0:1.5.1-24.el9_4",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhel_eus:9.4::appstream",
|
|
"cpe:/o:redhat:rhel_eus:9.4::baseos"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Web Terminal 1.11 on RHEL 9",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "web-terminal/web-terminal-rhel9-operator",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.11-19",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:webterminal:1.11::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Web Terminal 1.11 on RHEL 9",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "web-terminal/web-terminal-tooling-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.11-8",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:webterminal:1.11::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Web Terminal 1.12 on RHEL 9",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "web-terminal/web-terminal-tooling-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.12-4",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:webterminal:1.12::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-4.1752066672",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-businesscentral-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-4.1752065732",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-controller-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-4.1752065732",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-3.1752065737",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-kieserver-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-4.1752065731",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-operator-bundle",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-25",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-process-migration-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-4.1752065736",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-rhel8-operator",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-2.1752065733",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHEL-8 based Middleware Containers",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhpam-7/rhpam-smartrouter-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "7.13.5-4.1752065755",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:rhosemc:1.0::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-11",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-11",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-11",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-10",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-10",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-4",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-management-console-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-9",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-operator-bundle",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-12",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-rhel8-operator",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-18",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-11",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "RHOSS-1.36-RHEL-8",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.36.0-7",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_serverless:1.36::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "cert-manager operator for Red Hat OpenShift 1.16",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "v1.16.5-1760515757",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:cert_manager:1.16::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "OpenShift Compliance Operator 1",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "compliance/openshift-compliance-openscap-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.8.0",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Discovery 2",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "discovery/discovery-server-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "2.0.0-1752592913",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:discovery:2::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Discovery 2",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "discovery/discovery-server-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "2.2.1-1758555934",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:discovery:2::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat Insights proxy 1.5",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "insights-proxy/insights-proxy-container-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.5.7-1759331989",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:insights_proxy:1.5::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/opentelemetry-collector-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752046452",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/opentelemetry-rhel8-operator",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752046437",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/opentelemetry-target-allocator-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752046439",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/tempo-gateway-opa-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752070865",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/tempo-gateway-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752070873",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/tempo-jaeger-query-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1751993590",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/tempo-query-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752070827",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/tempo-rhel8",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752070833",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift distributed tracing 3.6.0",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "rhosdt/tempo-rhel8-operator",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "rhosdt-3.6-1752070866",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift sandboxed containers 1.10",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.10.2-1757422110",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift sandboxed containers 1.10",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.10.2-1757421804",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift sandboxed containers 1.10",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.10.2-1757421879",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Red Hat",
|
|
"product": "Red Hat OpenShift sandboxed containers 1.10",
|
|
"collectionURL": "https://catalog.redhat.com/software/containers/",
|
|
"packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
|
|
"defaultStatus": "affected",
|
|
"versions": [
|
|
{
|
|
"version": "1.10.2-1757422401",
|
|
"lessThan": "*",
|
|
"versionType": "rpm",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"cpes": [
|
|
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10024",
|
|
"name": "RHSA-2025:10024",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10027",
|
|
"name": "RHSA-2025:10027",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10180",
|
|
"name": "RHSA-2025:10180",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10354",
|
|
"name": "RHSA-2025:10354",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10357",
|
|
"name": "RHSA-2025:10357",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10358",
|
|
"name": "RHSA-2025:10358",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10359",
|
|
"name": "RHSA-2025:10359",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10361",
|
|
"name": "RHSA-2025:10361",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10362",
|
|
"name": "RHSA-2025:10362",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10735",
|
|
"name": "RHSA-2025:10735",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:10823",
|
|
"name": "RHSA-2025:10823",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:11386",
|
|
"name": "RHSA-2025:11386",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:11487",
|
|
"name": "RHSA-2025:11487",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:14557",
|
|
"name": "RHSA-2025:14557",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:15099",
|
|
"name": "RHSA-2025:15099",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:15709",
|
|
"name": "RHSA-2025:15709",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:15827",
|
|
"name": "RHSA-2025:15827",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:15828",
|
|
"name": "RHSA-2025:15828",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:16524",
|
|
"name": "RHSA-2025:16524",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:17181",
|
|
"name": "RHSA-2025:17181",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:18219",
|
|
"name": "RHSA-2025:18219",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:20181",
|
|
"name": "RHSA-2025:20181",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:21885",
|
|
"name": "RHSA-2025:21885",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:22019",
|
|
"name": "RHSA-2025:22019",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2025:9526",
|
|
"name": "RHSA-2025:9526",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/errata/RHSA-2026:0934",
|
|
"name": "RHSA-2026:0934",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://access.redhat.com/security/cve/CVE-2025-6020",
|
|
"tags": [
|
|
"vdb-entry",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
|
|
"name": "RHBZ#2372512",
|
|
"tags": [
|
|
"issue-tracking",
|
|
"x_refsource_REDHAT"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx"
|
|
}
|
|
],
|
|
"datePublic": "2025-06-17T00:00:00.000Z",
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"cweId": "CWE-22",
|
|
"description": "Improper Limitation of a Pathname to a Restricted Directory",
|
|
"lang": "en",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"x_redhatCweChain": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory",
|
|
"workarounds": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Disable the `pam_namespace` module if it is not essential for your environment, or carefully review and configure it to avoid operating on any directories or paths that can be influenced or controlled by unprivileged users, such as user home directories or world-writable locations like `/tmp`."
|
|
}
|
|
],
|
|
"timeline": [
|
|
{
|
|
"lang": "en",
|
|
"time": "2025-06-12T16:33:01.214Z",
|
|
"value": "Reported to Red Hat."
|
|
},
|
|
{
|
|
"lang": "en",
|
|
"time": "2025-06-17T00:00:00.000Z",
|
|
"value": "Made public."
|
|
}
|
|
],
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Red Hat would like to thank Olivier BAL-PETRE (ANSSI - French Cybersecurity Agency) for reporting this issue."
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
|
"shortName": "redhat",
|
|
"dateUpdated": "2026-11-06T01:00:32.143Z"
|
|
},
|
|
"x_generator": {
|
|
"engine": "cvelib 1.8.0"
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2025-06-17T13:30:00.379966Z",
|
|
"id": "CVE-2025-6020",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "total"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-08-04T15:50:02.597Z"
|
|
}
|
|
},
|
|
{
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2025/06/17/1"
|
|
},
|
|
{
|
|
"url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html"
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2025-11-03T18:13:57.307Z"
|
|
}
|
|
},
|
|
{
|
|
"x_adpType": "supplier",
|
|
"providerMetadata": {
|
|
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
|
|
"shortName": "siemens-SADP",
|
|
"dateUpdated": "2026-05-12T12:02:28.144Z"
|
|
},
|
|
"affected": [
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX MX5000",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX MX5000RE",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1400",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1500",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1501",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1510",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1511",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1512",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1524",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX1536",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
},
|
|
{
|
|
"vendor": "Siemens",
|
|
"product": "RUGGEDCOM ROX RX5000",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "0",
|
|
"lessThan": "V2.17.1",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unknown"
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://cert-portal.siemens.com/productcert/html/ssa-577017.html"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
} |