Vulnerabilities > CVE-2022-0552 - Unspecified vulnerability in Redhat Origin-Aggregated-Logging 3.11

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
high complexity
redhat
NVD
Published: 2022-04-11
Updated: 2024-11-21

Summary

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.

Vulnerable Configurations

Part Description Count
Application
Redhat
1

References