A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.
Weakness
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | RedHat | pam-0:1.3.1-36.el8_10 | * |
| Red Hat Enterprise Linux 9 | RedHat | pam-0:1.5.1-22.el9_5 | * |
| Red Hat Enterprise Linux 9 | RedHat | pam-0:1.5.1-22.el9_5 | * |
| Red Hat Enterprise Linux 9.4 Extended Update Support | RedHat | pam-0:1.5.1-23.el9_4 | * |
| Red Hat OpenShift Container Platform 4.16 | RedHat | rhcos-416.94.202411261619-0 | * |
| Red Hat OpenShift Container Platform 4.17 | RedHat | rhcos-417.94.202411261220-0 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/aws-kms-encryption-provider-rhel9:v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/azure-kms-encryption-provider-rhel9:v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/azure-service-rhel9-operator:v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/cloud-network-config-controller-rhel9:v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/container-networking-plugins-microshift-rhel9:v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/driver-toolkit-rhel9:v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/egress-router-cni-rhel9:v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/frr-rhel9:v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/insights-runtime-exporter-rhel9:v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/insights-runtime-extractor-rhel9:v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/kube-metrics-server-rhel9:v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/kubevirt-csi-driver-rhel9:v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/network-tools-rhel9:v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/oc-mirror-plugin-rhel9:v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/openshift-route-controller-manager-rhel9:v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-agent-installer-api-server-rhel9:v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-agent-installer-csr-approver-rhel9:v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-agent-installer-node-agent-rhel9:v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-agent-installer-orchestrator-rhel9:v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-agent-installer-utils-rhel9:v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-apiserver-network-proxy-rhel9:v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-aws-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-aws-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-aws-ebs-csi-driver-rhel9:v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-aws-ebs-csi-driver-rhel9-operator:v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-aws-pod-identity-webhook-rhel9:v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-cloud-node-manager-rhel9:v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-disk-csi-driver-rhel9:v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-disk-csi-driver-rhel9-operator:v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-file-csi-driver-operator-rhel9:v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-file-csi-driver-rhel9:v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-azure-workload-identity-webhook-rhel9:v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-baremetal-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-baremetal-installer-rhel9:v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-baremetal-machine-controllers-rhel9:v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-baremetal-rhel9-operator:v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-baremetal-runtimecfg-rhel9:v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cli-artifacts-rhel9:v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cli-rhel9:v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cloud-credential-rhel9-operator:v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-api-rhel9:v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-authentication-rhel9-operator:v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-autoscaler-rhel9:v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-autoscaler-rhel9-operator:v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-baremetal-operator-rhel9:v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-bootstrap-rhel9:v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-capi-rhel9-operator:v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator:v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-config-api-rhel9:v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-config-rhel9-operator:v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator:v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator:v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-dns-rhel9-operator:v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-etcd-rhel9-operator:v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-image-registry-rhel9-operator:v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-ingress-rhel9-operator:v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-kube-apiserver-rhel9-operator:v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-kube-cluster-api-rhel9-operator:v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-kube-controller-manager-rhel9-operator:v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-kube-scheduler-rhel9-operator:v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator:v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-machine-approver-rhel9:v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-monitoring-rhel9-operator:v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-network-rhel9-operator:v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-node-tuning-rhel9-operator:v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-olm-rhel9-operator:v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-openshift-apiserver-rhel9-operator:v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator:v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-policy-controller-rhel9:v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-samples-rhel9-operator:v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-storage-rhel9-operator:v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-update-keys-rhel9:v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-cluster-version-rhel9-operator:v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-configmap-reloader-rhel9:v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-console-rhel9:v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-console-rhel9-operator:v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-container-networking-plugins-rhel9:v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-coredns-rhel9:v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-driver-manila-rhel9:v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-driver-manila-rhel9-operator:v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-driver-nfs-rhel9:v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-external-attacher-rhel9:v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-external-provisioner-rhel9:v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-external-resizer-rhel9:v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-external-snapshotter-rhel9:v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-livenessprobe-rhel9:v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-node-driver-registrar-rhel9:v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-snapshot-controller-rhel9:v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-csi-snapshot-validation-webhook-rhel9:v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-deployer-rhel9:v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-docker-builder-rhel9:v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-docker-registry-rhel9:v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-etcd-rhel9:v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-gcp-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-gcp-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-gcp-pd-csi-driver-operator-rhel9:v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-gcp-pd-csi-driver-rhel9:v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-gcp-workload-identity-federation-webhook-rhel9:v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-haproxy-router-rhel9:v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-hyperkube-rhel9:v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-hypershift-rhel9:v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ibmcloud-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ibm-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ibmcloud-machine-controllers-rhel9:v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9:v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator:v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-image-customization-controller-rhel9:v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-insights-rhel9-operator:v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-installer-altinfra-rhel9:v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-installer-artifacts-rhel9:v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-installer-rhel9:v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ironic-agent-rhel9:v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ironic-machine-os-downloader-rhel9:v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ironic-rhel9:v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ironic-static-ip-manager-rhel9:v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-keepalived-ipfailover-rhel9:v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-kube-proxy-rhel9:v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-kube-rbac-proxy-rhel9:v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-kube-state-metrics-rhel9:v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-kube-storage-version-migrator-rhel9:v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-kubevirt-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-libvirt-machine-controllers-rhel9:v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-api-provider-aws-rhel9:v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-api-provider-azure-rhel9:v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-api-provider-gcp-rhel9:v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-api-provider-openstack-rhel9:v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-api-rhel9-operator:v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-config-rhel9-operator:v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-machine-os-images-rhel9:v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-monitoring-plugin-rhel9:v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-multus-admission-controller-rhel9:v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-multus-cni-microshift-rhel9:v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-multus-cni-rhel9:v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-multus-networkpolicy-rhel9:v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-multus-route-override-cni-rhel9:v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-multus-whereabouts-ipam-cni-rhel9:v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-must-gather-rhel9:v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-networking-console-plugin-rhel9:v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-network-interface-bond-cni-rhel9:v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-network-metrics-daemon-rhel9:v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-nutanix-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-nutanix-machine-controllers-rhel9:v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-oauth-apiserver-rhel9:v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-oauth-proxy-rhel9:v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-oauth-server-rhel9:v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-olm-catalogd-rhel9:v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-olm-operator-controller-rhel9:v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openshift-apiserver-rhel9:v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openshift-controller-manager-rhel9:v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openshift-state-metrics-rhel9:v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openstack-cinder-csi-driver-rhel9:v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openstack-cinder-csi-driver-rhel9-operator:v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openstack-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-openstack-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-operator-framework-tools-rhel9:v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-operator-lifecycle-manager-rhel9:v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-operator-marketplace-rhel9:v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-operator-registry-rhel9:v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ovn-kubernetes-microshift-rhel9:v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-ovn-kubernetes-rhel9:v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-pod-rhel9:v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-powervs-block-csi-driver-rhel9:v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-powervs-block-csi-driver-rhel9-operator:v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-powervs-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-powervs-machine-controllers-rhel9:v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prometheus-alertmanager-rhel9:v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prometheus-config-reloader-rhel9:v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prometheus-node-exporter-rhel9:v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prometheus-operator-admission-webhook-rhel9:v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prometheus-rhel9:v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prometheus-rhel9-operator:v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-prom-label-proxy-rhel9:v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-service-ca-rhel9-operator:v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-telemeter-rhel9:v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-tests-rhel9:v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-thanos-rhel9:v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-tools-rhel9:v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vmware-vsphere-csi-driver-rhel9:v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vmware-vsphere-csi-driver-rhel9-operator:v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vsphere-cloud-controller-manager-rhel9:v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vsphere-cluster-api-controllers-rhel9:v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vsphere-csi-driver-rhel9:v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vsphere-csi-driver-rhel9-operator:v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vsphere-csi-driver-syncer-rhel9:v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ose-vsphere-problem-detector-rhel9:v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ovirt-csi-driver-rhel9:v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | openshift4/ovirt-csi-driver-rhel9-operator:v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 | * |
| Red Hat OpenShift Container Platform 4.18 | RedHat | rhcos-418.94.202502100215-0 | * |
| Red Hat OpenShift AI 2.16 | RedHat | rhoai/odh-dashboard-rhel8:v2.16.0-1733133582 | * |
| Pam | Ubuntu | devel | * |
| Pam | Ubuntu | noble | * |
| Pam | Ubuntu | oracular | * |
| Pam | Ubuntu | plucky | * |
| Pam | Ubuntu | trusty/esm | * |
| Pam | Ubuntu | upstream | * |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/114.html
- https://cwe.mitre.org/data/definitions/115.html
- https://cwe.mitre.org/data/definitions/151.html
- https://cwe.mitre.org/data/definitions/194.html
- https://cwe.mitre.org/data/definitions/22.html
- https://cwe.mitre.org/data/definitions/57.html
- https://cwe.mitre.org/data/definitions/593.html
- https://cwe.mitre.org/data/definitions/633.html
- https://cwe.mitre.org/data/definitions/650.html
- https://cwe.mitre.org/data/definitions/94.html
References
- https://access.redhat.com/errata/RHSA-2024:10232
- https://access.redhat.com/errata/RHSA-2024:10244
- https://access.redhat.com/errata/RHSA-2024:10379
- https://access.redhat.com/errata/RHSA-2024:10518
- https://access.redhat.com/errata/RHSA-2024:10528
- https://access.redhat.com/errata/RHSA-2024:10852
- https://access.redhat.com/errata/RHSA-2024:6122
- https://access.redhat.com/security/cve/CVE-2024-10963
- https://bugzilla.redhat.com/show_bug.cgi?id=2324291
- https://github.com/linux-pam/linux-pam/issues/834
- https://github.com/linux-pam/linux-pam/pull/835