What’s Vulnerable › Vulnerabilities

CVE-2022-4039: Rhsso-container-image: unsecured management interface exposed to adjecent network

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-22 · updated 2026-06-17
• Weakness: CWE-276

Description

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Affected products

• Red Hat OpenShift Container Platform 4.18: 4.9, 4.10
• RedHat Openshift Container Platform For Ibm Z: 4.9, 4.10
• RedHat Openshift Container Platform For Linuxone: 4.9, 4.10
• RedHat Openshift Container Platform For Power: 4.9, 4.10
• Red Hat Single Sign-On: 7.0

References

• https://access.redhat.com/errata/RHSA-2023:1047
• https://access.redhat.com/security/cve/CVE-2022-4039
• https://bugzilla.redhat.com/show_bug.cgi?id=2143416
• https://access.redhat.com/errata/RHSA-2023:1047
• https://access.redhat.com/security/cve/CVE-2022-4039
• https://bugzilla.redhat.com/show_bug.cgi?id=2143416

Get alerted when CVE-2022-4039 or the next vulnerability affects your stack