Redhat Openshift Container Platform For Power vulnerabilities, page 2
23 vulnerabilities
Known vulnerabilities in Redhat Openshift Container Platform For Power, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-6563org.keycloakkeycloak-model-jpa+5
EPSS score1.24%
An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the "consents" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.CVE-2023-3223debianundertow+9EPSS score2.66%
A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.CVE-2023-3089redhatopenshift_container_platform+9EPSS score0.52%
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.