CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-4039
Critical (9.8) in redhat. EPSS 0.8% chance of exploitation in the next 30 days.
A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-276
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:openshift_container_platform
- redhat:openshift_container_platform_for_ibm_z
- redhat:openshift_container_platform_for_linuxone
- redhat:openshift_container_platform_for_power
- redhat:single_sign-on