CVE-2022-0552

EPSS 1.1%CWE-444

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.1%KEV nãoPoC —Patch —

Ciclo de vida

11 abr 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.

Productos afectados

n/a · origin-aggregated-logging/elasticsearch

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://access.redhat.com/security/cve/CVE-2021-21409 https://bugzilla.redhat.com/show_bug.cgi?id=2052539 https://github.com/openshift/origin-aggregated-logging/commit/d6b72d6c32e7c06b65324294d10406546734004d