Nick Tait

**Name of the Vulnerable Software and Affected Versions** OpenShift Cluster Monitoring Operator (affected versions not specified) **Description** A credentials leak issue was discovered in the cluster monitoring operator, potentially allowing a remote attacker with basic login credentials to access the pod manifest and discover a repository pull secret. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Quarkus (affected versions not specified) **Description** A vulnerability was found in Quarkus where, under certain conditions related to the Continuous Integration (CI) process, git credentials could be inadvertently published. This could put the git repository at risk. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenShift Virtualization (affected versions not specified) **Description** A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP), which could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Keycloak (affected versions not specified) **Description** A flaw was found in Keycloak, which may allow a remote unauthenticated attacker to block other accounts from logging in under certain conditions. This issue is related to an overly restrictive mechanism for blocking user credentials. In realms set with "User (Self) registration", a user registered with a username in email format can be locked out using their username. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Keycloak (affected versions not specified) **Description** An unconstrained memory consumption issue was discovered. It can be triggered in environments with millions of offline tokens, specifically when there are more than 500,000 users, each having at least 2 saved sessions. If an attacker creates two or more user sessions and then opens the "consents" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions. This leads to excessive memory and CPU consumption, which could potentially crash the entire system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenStack Designate (affected versions not specified) **Description** An access-control flaw was found in the OpenStack Designate component where private configuration information, including access keys to BIND, were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information. The flaw is related to insufficient access control when handling the /etc/designate/private and /etc/designate/private/bind1.conf files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenShift (affected versions not specified) **Description** A content spoofing flaw was found in OpenShift's OAuth endpoint, allowing a remote, unauthenticated attacker to inject text into a webpage. This enables the obfuscation of a phishing operation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenShift (affected versions not specified) **Description** A privilege escalation flaw was found in the node restriction admission plugin of the Kubernetes API server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** tracker-miners (affected versions not specified) **Description** A flaw was found in the tracker-miners package, which is part of the GNOME operating system for Linux. The issue is related to a weakness in the sandbox mechanism that allows a maliciously-crafted file to execute code outside the sandbox. This can happen if the tracker-extract process has first been compromised by a separate vulnerability. The exploitation of this flaw can enable a remote attacker to bypass the restrictions of an isolated software environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** kube-apiserver (affected versions not specified) **Description** An authentication bypass issue was discovered in kube-apiserver, allowing a remote, authenticated attacker with `update, patch` permissions on the `pods/ephemeralcontainers` subresource to potentially evade SCC admission restrictions. This could enable them to gain control of a privileged pod by creating a new pod or patching an existing one they have access to. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenStack Barbican (affected versions not specified) **Description** A vulnerability was found in OpenStack Barbican containers, applicable only to deployments utilizing an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kiali (affected versions not specified) **Description** A content spoofing issue was found in Kiali, where it does not implement error handling when the page or endpoint being accessed cannot be found. This allows an attacker to perform arbitrary text injection when an error response is retrieved from the URL being accessed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Red Hat OpenShift Container Platform (affected versions not specified) **Description** A compliance issue was discovered in the Red Hat OpenShift Container Platform, where not all cryptographic modules in use were FIPS-validated when FIPS mode was enabled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** openstack-glance (affected versions not specified) **Description** A flaw was found in openstack-glance, allowing a remote, authenticated attacker to tamper with images. This could compromise the integrity of virtual machines created using these modified images. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** openstack-neutron (affected versions not specified) **Description** An uncontrolled resource consumption flaw was found in openstack-neutron, allowing a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota, potentially leading to a denial of service if a malicious user submits a significant number of requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenStack Platform (affected versions not specified) **Description** The issue is related to an information leak found in OpenStack's undercloud, which allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud. This could lead to compromising private information, including administrator access credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Podman (affected versions not specified) **Description** A privilege escalation flaw in Podman allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command, giving the attacker access to the host filesystem and potentially leading to information disclosure or denial of service. The issue is related to incorrect privilege management when running 'podman top' in a container created from a malicious image. **Recommendations** As a temporary workaround, consider disabling the `podman top` command until a patch is available. Restrict access to the `nsenter` binary to minimize the risk of exploitation. Avoid using untrusted sources for the `nsenter` binary. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: openstack-cinder versions up to and including Queens Description: A vulnerability was found in openstack-cinder, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants. Recommendations: For openstack-cinder versions up to and including Queens, consider reconfiguring storage volume settings to avoid using thin volumes and zero padding with ScaleIO volumes until a fix is available. As a temporary workaround, restrict access to sensitive information stored on newly created volumes to minimize the risk of data leakage.