RHBA-2020:0402: atomic-enterprise-service-catalog Red Hat

CVSS: 8.6v3.1HighPublished

Published 16-09-2024Last modified 28-06-2026

Open JSON

Vulnerability summary

RHBA-2020:0402 is a high (CVSS 8.6) vulnerability in atomic-enterprise-service-catalog Red Hat.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.6/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0

CVE-2019-11358 CVE-2020-2099 CVE-2020-2100 CVE-2020-2101 CVE-2020-2102 CVE-2020-2103+2 more

Timeline

16-09-2024
PublishedVulnerability first disclosed.
28-06-2026
Last modifiedVulnerability information updated.

Description

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update

CVSS metrics

1 score · 1 source · 1 version

v3.18.6

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat45 products

atomic-enterprise-service-catalog< 1:3.11.170-1.git.1.91db82e.el7
atomic-enterprise-service-catalog-svcat< 1:3.11.170-1.git.1.91db82e.el7
atomic-openshift< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-clients< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-clients-redistributable< 0:3.11.170-1.git.0.00cac56.el7

atomic-openshift-cluster-autoscaler< 0:3.11.170-1.git.1.0a0df6a.el7
atomic-openshift-descheduler< 0:3.11.170-1.git.1.9ad83f2.el7
atomic-openshift-docker-excluder< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-dockerregistry< 0:3.11.170-1.git.1.55fab05.el7
atomic-openshift-excluder< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-hyperkube< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-hypershift< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-master< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-metrics-server< 0:3.11.170-1.git.1.357f177.el7
atomic-openshift-node< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-node-problem-detector< 0:3.11.170-1.git.1.b1f90a6.el7
atomic-openshift-pod< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-sdn-ovs< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-service-idler< 0:3.11.170-1.git.1.8328979.el7
atomic-openshift-template-service-broker< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-tests< 0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-web-console< 0:3.11.170-1.git.1.3d64e8b.el7
cri-o< 0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
cri-o-debuginfo< 0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
golang-github-openshift-oauth-proxy< 0:3.11.170-1.git.1.b49be83.el7
golang-github-prometheus-alertmanager< 0:3.11.170-1.git.1.61d7960.el7
golang-github-prometheus-node_exporter< 0:3.11.170-1.git.1.51473b7.el7
golang-github-prometheus-prometheus< 0:3.11.170-1.git.1.227bc98.el7
jenkins< 0:2.204.2.1580891656-1.el7
jenkins-2-plugins< 0:3.11.1579107288-1.el7
openshift-ansible< 0:3.11.170-2.git.5.8802564.el7
openshift-ansible-docs< 0:3.11.170-2.git.5.8802564.el7
openshift-ansible-playbooks< 0:3.11.170-2.git.5.8802564.el7
openshift-ansible-roles< 0:3.11.170-2.git.5.8802564.el7
openshift-ansible-test< 0:3.11.170-2.git.5.8802564.el7
openshift-enterprise-autoheal< 0:3.11.170-1.git.1.dfe6c52.el7
openshift-enterprise-cluster-capacity< 0:3.11.170-1.git.1.661684b.el7
openshift-kuryr< 0:3.11.170-1.git.1.7265da1.el7
openshift-kuryr-cni< 0:3.11.170-1.git.1.7265da1.el7
openshift-kuryr-common< 0:3.11.170-1.git.1.7265da1.el7
openshift-kuryr-controller< 0:3.11.170-1.git.1.7265da1.el7
prometheus< 0:3.11.170-1.git.1.227bc98.el7
prometheus-alertmanager< 0:3.11.170-1.git.1.61d7960.el7
prometheus-node-exporter< 0:3.11.170-1.git.1.51473b7.el7
python2-kuryr-kubernetes< 0:3.11.170-1.git.1.7265da1.el7

Show all 45

1 vendor · 45 products

References

49 links

Show all 49 references

bugzilla.redhat.com/show_bug.cgi?id=1791667REPORT
bugzilla.redhat.com/show_bug.cgi?id=1793628REPORT
bugzilla.redhat.com/show_bug.cgi?id=1795930REPORT
bugzilla.redhat.com/show_bug.cgi?id=1798365REPORT
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0402.jsonAdvisory
access.redhat.com/security/cve/CVE-2019-11358REPORT
bugzilla.redhat.com/show_bug.cgi?id=1701972REPORT
www.cve.org/CVERecord?id=CVE-2019-11358Advisory
nvd.nist.gov/vuln/detail/CVE-2019-11358Advisory
blog.jquery.com/2019/04/10/jquery-3-4-0-released/ARTICLE
www.drupal.org/sa-core-2019-006ARTICLE
access.redhat.com/security/cve/CVE-2020-2099REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797080REPORT
www.cve.org/CVERecord?id=CVE-2020-2099Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2099Advisory
access.redhat.com/security/cve/CVE-2020-2100REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797087REPORT
www.cve.org/CVERecord?id=CVE-2020-2100Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2100Advisory
access.redhat.com/security/cve/CVE-2020-2101REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797084REPORT
www.cve.org/CVERecord?id=CVE-2020-2101Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2101Advisory
access.redhat.com/security/cve/CVE-2020-2102REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797071REPORT
www.cve.org/CVERecord?id=CVE-2020-2102Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2102Advisory
access.redhat.com/security/cve/CVE-2020-2103REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797062REPORT
www.cve.org/CVERecord?id=CVE-2020-2103Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2103Advisory
access.redhat.com/security/cve/CVE-2020-2104REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797065REPORT
www.cve.org/CVERecord?id=CVE-2020-2104Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2104Advisory
access.redhat.com/security/cve/CVE-2020-2105REPORT
bugzilla.redhat.com/show_bug.cgi?id=1797068REPORT
www.cve.org/CVERecord?id=CVE-2020-2105Advisory
nvd.nist.gov/vuln/detail/CVE-2020-2105Advisory