CVE-2022-3841

7.8 highEPSS 0.2%

High (7.8) in redhat advanced cluster management for kubernetes. EPSS 0.2% chance of exploitation in the next 30 days.

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2023-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:advanced_cluster_management_for_kubernetes

References

https://access.redhat.com/security/cve/CVE-2022-3841
https://access.redhat.com/security/cve/CVE-2022-3841

Check your stack JSON