CVE-2022-4039
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Rhsso-container-image: unsecured management interface exposed to adjecent network
A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RHEL-8 based Middleware Containers
- Vendor
- Red Hat
- Product
- RHEL-8 based Middleware Containers
- Platforms
- Unknown
- Default status
affected- Package
- rh-sso-7/sso76-openshift-rhel8
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.6-20 | unaffected | rpm | * | Unavailable | None listed |
Red Hat Single Sign-On 7
- Vendor
- Red Hat
- Product
- Red Hat Single Sign-On 7
- Platforms
- Unknown
- Default status
affected- Package
- rhsso-container-image
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.