Lucene search
RedHatRHSA-2020:2362HistoryJun 02, 2020 - 3:21 p.m.
(RHSA-2020:2362) Moderate: Red Hat OpenShift Service Mesh security update
2020-06-0215:21:32
access.redhat.com
36
0.061 Low
EPSS
Percentile
93.5%
Red Hat OpenShift Service Mesh is Red Hat’s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.
Security Fix(es):
-
nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties (CVE-2019-10744)
-
nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or proto payload (CVE-2020-7598)
-
jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)
-
grafana: information disclosure through world-readable grafana configuration files (CVE-2020-12459)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | kiali | <Â v1.0.11.redhat1-1.el7 | kiali-v1.0.11.redhat1-1.el7.x86_64.rpm |
| RedHat | 8 | x86_64 | servicemesh-grafana | <Â 6.2.2-36.el8 | servicemesh-grafana-6.2.2-36.el8.x86_64.rpm |
| RedHat | 8 | x86_64 | servicemesh-grafana-prometheus | <Â 6.2.2-36.el8 | servicemesh-grafana-prometheus-6.2.2-36.el8.x86_64.rpm |
| RedHat | 7 | x86_64 | jaeger | <Â v1.13.1.redhat7-1.el7 | jaeger-v1.13.1.redhat7-1.el7.x86_64.rpm |
Related
nessus
nessus
RHEL 7 / 8 : Red Hat OpenShift Service Mesh (RHSA-2020:2362)
2020-06-03 00:00:00
F5 Networks BIG-IP : Lodash library vulnerability (K47105354)
2020-04-24 00:00:00
F5 Networks BIG-IP : jQuery vulnerability (K02453220)
2023-11-02 00:00:00
redhatcve
redhatcve
osv
osv
Grafana world readable configuration files
2022-05-24 17:16:52
Prototype Pollution in lodash
2019-07-10 19:45:23
BIT-grafana-2020-12459
2024-03-06 11:01:12
nodejs
nodejs
Prototype Pollution
2020-05-20 01:36:49
Prototype Pollution
2019-07-15 17:22:56
Cross-Site Scripting
2020-04-30 18:19:09
githubexploit
githubexploit
Exploit for CVE-2019-10744
2020-12-01 09:18:57
Exploit for Cross-site Scripting in Jquery
2020-11-02 20:55:10
Exploit for Cross-site Scripting in Jquery
2021-10-16 01:10:33
ibm
ibm
veracode
veracode
Information Disclosure
2020-06-03 04:17:51
Prototype Pollution
2019-06-28 13:52:21
Prototype Pollution
2020-03-12 05:22:55
cve
cve
prion
prion
Design/Logic Flaw
2020-04-29 16:15:00
Design/Logic Flaw
2019-07-26 00:15:00
Design/Logic Flaw
2020-03-11 23:15:00
cvelist
cvelist
github
github
Grafana world readable configuration files
2022-05-24 17:16:52
Prototype Pollution in lodash
2019-07-10 19:45:23
Prototype Pollution in minimist
2020-04-03 21:48:32
ubuntucve
ubuntucve
debiancve
debiancve
f5
f5
K47105354 : Lodash library vulnerability CVE-2019-10744
2019-11-13 00:00:00
K02453220 : jQuery vulnerability CVE-2020-11022
2020-08-03 00:00:00
thn
thn
packetstorm
packetstorm
jQuery 1.2 Cross Site Scripting
2021-04-14 00:00:00
openvas
openvas
jQuery 1.2 < 3.5.0 XSS Vulnerability
2020-05-05 00:00:00
Tenable Nessus < 8.13.0 XSS Vulnerability (TNS-2020-10)
2023-05-17 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2020-c6b0c7ebbb)
2020-05-15 00:00:00
zdt
zdt
jQuery 1.2 - Cross-Site Scripting Vulnerability
2021-04-14 00:00:00
hackerone
hackerone
Reddit: CVE-2020-11022
2022-12-20 17:19:58
alpinelinux
alpinelinux
CVE-2020-11022
2020-04-29 22:15:00
redhat
redhat
(RHSA-2020:2217) Moderate: OpenShift Container Platform 3.11 security update
2020-05-28 11:08:25
(RHSA-2019:3024) Moderate: ovirt-web-ui security and bug fix update
2019-10-10 14:49:46
(RHSA-2020:2848) Important: nodejs:10 security update
2020-07-07 08:51:24
fedora
fedora
[SECURITY] Fedora 31 Update: grafana-6.7.3-1.fc31
2020-05-14 02:29:55
[SECURITY] Fedora 32 Update: grafana-6.7.3-1.fc32
2020-05-14 02:36:58
[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32
2020-06-16 01:32:24
exploitdb
exploitdb
jQuery 1.2 - Cross-Site Scripting (XSS)
2021-04-14 00:00:00
suse
suse
Security update for otrs (moderate)
2020-11-10 00:00:00
Security update for nodejs8 (critical)
2020-06-13 00:00:00
attackerkb
attackerkb
CVE-2020-11022
2020-04-29 00:00:00
CVE-2020-11023
2020-04-29 00:00:00
hp
hp
Certain HP Printers and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
atlassian
atlassian
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
jquery 2.2.4 XSS vulnerability
2022-08-24 14:53:45
joomla
joomla
[20200604] - Core - XSS in jQuery.htmlPrefilter
2020-04-10 00:00:00
oraclelinux
oraclelinux
jquery-ui security update
2022-03-01 00:00:00
debian
debian
[SECURITY] [DLA 2608-1] jquery security update
2021-03-26 01:32:42
[SECURITY] [DSA 4693-1] drupal7 security update
2020-05-26 21:08:38
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
2020-05-20 00:00:00
checkpoint_advisories
checkpoint_advisories
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
2020-11-16 00:00:00
rocky
rocky
nodejs:10 security update
2020-07-07 08:51:24
almalinux
almalinux
Important: nodejs:10 security update
2020-07-07 08:51:24
ics
ics
AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere (Update A)
2023-03-16 12:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
typo3
typo3
Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)
2020-07-29 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2020-07-26 00:00:00