CVE-2022-4039 Vulnerability Details

  /     /     /  

CVE-2022-4039 Metadata Quick Info

CVE Published: 22/09/2023 | CVE Updated: 24/09/2024 | CVE Year: 2022
Source: redhat | Vendor: Red Hat | Product: RHEL-8 based Middleware Containers
Status : PUBLISHED

---

CVE-2022-4039 Description

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-276
CWE Name: Incorrect Default Permissions
Source: Red Hat

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).