8.8

RHBA-2020:2435: atomic-enterprise-service-catalog Red Hat

CVSS: 8.8v3.1HighPublished
Published 16-09-2024Last modified 27-06-2026

Vulnerability summary

RHBA-2020:2435 is a high (CVSS 8.8) vulnerability in atomic-enterprise-service-catalog Red Hat.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (OSV · Red hat), selected by version preference
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0

Timeline

  1. 16-09-2024
    PublishedVulnerability first disclosed.
  2. 27-06-2026
    Last modifiedVulnerability information updated.

Description

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.25 packages update

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat46 products
  • atomic-enterprise-service-catalog< 1:4.3.25-202006081518.git.1.52b3a66.el7
  • atomic-enterprise-service-catalog-svcat< 1:4.3.25-202006081518.git.1.52b3a66.el7
  • atomic-openshift-service-idler< 0:4.3.25-202006081518.git.1.79365c5.el7
  • conmon< 2:2.0.17-1.rhaos4.3.el7 | < 2:2.0.17-1.rhaos4.3.el8
  • cri-o< 0:1.16.6-15.dev.rhaos4.3.gitebc053b.el7 | < 0:1.16.6-15.dev.rhaos4.3.gitebc053b.el8

1 vendor · 46 products

References

23 links
Show all 23 references