{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-36067", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "dateUpdated": "2024-08-03T09:51:59.996Z", "dateReserved": "2022-07-15T00:00:00", "datePublished": "2022-09-06T00:00:00"}, "containers": {"cna": {"title": "vm2 vulnerable to Sandbox Escape before v3.9.11", "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2022-10-17T00:00:00"}, "descriptions": [{"lang": "en", "value": "vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds."}], "affected": [{"vendor": "patriksimek", "product": "vm2", "versions": [{"version": "< 3.9.11", "status": "affected"}]}], "references": [{"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-mrgp-mrhc-5jrq"}, {"url": "https://github.com/patriksimek/vm2/issues/467"}, {"url": "https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164"}, {"url": "https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71"}, {"url": "https://www.oxeye.io/blog/vm2-sandbreak-vulnerability-cve-2022-36067"}, {"url": "https://security.netapp.com/advisory/ntap-20221017-0002/"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-913: Improper Control of Dynamically-Managed Code Resources", "cweId": "CWE-913"}]}], "source": {"advisory": "GHSA-mrgp-mrhc-5jrq", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:51:59.996Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-mrgp-mrhc-5jrq", "tags": ["x_transferred"]}, {"url": "https://github.com/patriksimek/vm2/issues/467", "tags": ["x_transferred"]}, {"url": "https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164", "tags": ["x_transferred"]}, {"url": "https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71", "tags": ["x_transferred"]}, {"url": "https://www.oxeye.io/blog/vm2-sandbreak-vulnerability-cve-2022-36067", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20221017-0002/", "tags": ["x_transferred"]}]}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "3CB151FD-32BF-4CED-93D3-F07D6F62E4DC", "versionEndExcluding": "3.9.11", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds."}, {"lang": "es", "value": "vm2 es un sandbox que puede ejecutar c\u00f3digo no confiable con los m\u00f3dulos incorporados de Node en la lista blanca. En versiones anteriores a 3.9.11, un actor de la amenaza puede omitir las protecciones del sandbox para conseguir derechos de ejecuci\u00f3n de c\u00f3digo remoto en el host que ejecuta el sandbox. Esta vulnerabilidad fue parcheada en el lanzamiento de la versi\u00f3n 3.9.11 de vm2. No se presentan mitigaciones conocidas.\n"}], "id": "CVE-2022-36067", "lastModified": "2022-11-08T03:03:23.473", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2022-09-06T22:15:09.207", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/patriksimek/vm2/issues/467"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-mrgp-mrhc-5jrq"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20221017-0002/"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.oxeye.io/blog/vm2-sandbreak-vulnerability-cve-2022-36067"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-913"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-913"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-agent-service-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-apiserver-network-proxy-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-assisted-image-service-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-assisted-installer-agent-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-assisted-installer-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-assisted-installer-reporter-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-aws-encryption-provider-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-cluster-api-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-cluster-api-provider-agent-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-cluster-api-provider-aws-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-cluster-api-provider-azure-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-cluster-api-provider-kubevirt-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-clusterclaims-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-cluster-curator-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-clusterlifecycle-state-metrics-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-console-mce-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-discovery-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-hive-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-hypershift-addon-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-hypershift-deployment-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-hypershift-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-klusterlet-operator-bundle-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-managedcluster-import-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-managed-serviceaccount-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-multicloud-manager-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-must-gather-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-operator-bundle-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-placement-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-provider-credential-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-registration-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-registration-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6422", "cpe": "cpe:/a:redhat:multicluster_engine:2.0::el8", "package": "multicluster-engine-work-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-agent-service-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-apiserver-network-proxy-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-image-service-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-installer-agent-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-installer-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-assisted-installer-reporter-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-aws-encryption-provider-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-agent-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-aws-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-azure-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-api-provider-kubevirt-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-clusterclaims-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-curator-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-clusterlifecycle-state-metrics-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-proxy-addon-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-cluster-proxy-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-console-mce-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-discovery-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hive-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hypershift-addon-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hypershift-deployment-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-hypershift-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-klusterlet-operator-bundle-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-managedcluster-import-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-managed-serviceaccount-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-multicloud-manager-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-must-gather-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-operator-bundle-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-placement-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-provider-credential-controller-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-registration-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-registration-operator-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6424", "cpe": "cpe:/a:redhat:multicluster_engine:2.1::el8", "package": "multicluster-engine-work-container", "product_name": "Multicluster Engine for Kubernetes", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "acm-grafana-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "acm-must-gather-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "acm-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "application-ui-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "assisted-image-service-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "cert-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "cluster-backup-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "clusterclaims-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "cluster-curator-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "clusterlifecycle-state-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "cluster-proxy-addon-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "config-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "console-api-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "console-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "discovery-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "endpoint-monitoring-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "governance-policy-propagator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "governance-policy-spec-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "governance-policy-status-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "governance-policy-template-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "grafana-dashboard-loader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "grc-ui-api-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "grc-ui-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "iam-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "insights-client-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "insights-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "klusterlet-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "klusterlet-addon-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "kube-rbac-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "kube-state-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "managedcluster-import-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "management-ingress-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "memcached-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "memcached-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "metrics-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicloud-integrations-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicloud-manager-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multiclusterhub-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multiclusterhub-repo-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-observability-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-operators-application-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-operators-channel-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-operators-deployable-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-operators-placementrule-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-operators-subscription-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "multicluster-operators-subscription-release-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "node-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "observatorium-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "observatorium-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "openshift-hive-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "placement-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "prometheus-alertmanager-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "prometheus-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "provider-credential-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "rbac-query-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "redisgraph-tls-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "registration-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "registration-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "rhacm-agent-service-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "rhacm-assisted-installer-agent-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "rhacm-assisted-installer-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "rhacm-assisted-installer-reporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "search-aggregator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "search-api-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "search-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "search-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "search-ui-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "submariner-addon-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "thanos-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "thanos-receive-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "volsync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "volsync-mover-rclone-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "volsync-mover-restic-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "volsync-mover-rsync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6696", "cpe": "cpe:/a:redhat:acm:2.4::el8", "package": "work-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-26T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-cluster-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-governance-policy-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-grafana-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-must-gather-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-prometheus-config-reloader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-prometheus-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "acm-volsync-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "cert-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "cluster-backup-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "cluster-proxy-addon-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "config-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "console-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "endpoint-monitoring-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "governance-policy-propagator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "governance-policy-spec-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "governance-policy-status-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "governance-policy-template-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "grafana-dashboard-loader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "iam-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "insights-client-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "insights-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "klusterlet-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "klusterlet-addon-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "kube-rbac-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "kube-state-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "management-ingress-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "memcached-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "memcached-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "metrics-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multicloud-integrations-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multiclusterhub-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multiclusterhub-repo-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multicluster-observability-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multicluster-operators-application-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multicluster-operators-channel-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "multicluster-operators-subscription-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "node-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "observatorium-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "observatorium-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "prometheus-alertmanager-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "prometheus-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "rbac-query-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "redisgraph-tls-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "search-aggregator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "search-api-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "search-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "search-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "submariner-addon-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "thanos-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6507", "cpe": "cpe:/a:redhat:acm:2.5::el8", "package": "thanos-receive-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-13T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-governance-policy-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-grafana-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-must-gather-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-operator-bundle-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-prometheus-config-reloader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-prometheus-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "acm-volsync-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "cert-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "cluster-backup-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "config-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "console-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "endpoint-monitoring-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-propagator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-spec-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-status-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "governance-policy-template-sync-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "grafana-dashboard-loader-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "iam-policy-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "insights-client-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "insights-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "klusterlet-addon-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "kube-rbac-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "kube-state-metrics-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "management-ingress-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "memcached-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "memcached-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "metrics-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicloud-integrations-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multiclusterhub-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multiclusterhub-repo-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-observability-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-operators-application-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-operators-channel-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "multicluster-operators-subscription-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "node-exporter-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "observatorium-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "observatorium-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "prometheus-alertmanager-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "prometheus-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "rbac-query-proxy-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "redisgraph-tls-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-aggregator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-api-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-collector-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "search-operator-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "submariner-addon-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "thanos-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}, {"advisory": "RHSA-2022:6427", "cpe": "cpe:/a:redhat:acm:2.6::el8", "package": "thanos-receive-controller-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2", "release_date": "2022-09-12T00:00:00Z"}], "bugzilla": {"description": "vm2: Sandbox Escape in vm2", "id": "2124794", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2124794"}, "csaw": false, "cvss3": {"cvss3_base_score": "10.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-913", "details": ["vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds.", "A flaw was found in the vm2 sandbox when running untrusted code, as the sandbox setup does not manage proper exception handling. This flaw allows an attacker to bypass the sandbox protections and gain remote code execution on the hypervisor host or the host which is running the sandbox."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2022-36067", "package_state": [{"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "impact": "critical", "package_name": "rhacm2/console-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}], "public_date": "2022-09-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-36067\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-36067\nhttps://github.com/patriksimek/vm2/security/advisories/GHSA-mrgp-mrhc-5jrq"], "threat_severity": "Critical", "upstream_fix": "vm2 3.9.11"}