CVE-2024-3727

2024-05-1415:42:07
CWE-354
[email protected]
web.nvd.nist.gov
flaw
containers
image library
unauthorized access
resource exhaustion
local path traversal
nvd
8.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.1%
JSON
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
CNA Affected

[
  {
    "vendor": "Red Hat",
    "product": "Migration Toolkit for Containers",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhmtc/openshift-migration-controller-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:rhmt"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Multicluster Engine for Kubernetes",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "multicluster-engine/agent-service-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:multicluster_engine"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Multicluster Engine for Kubernetes",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "multicluster-engine/assisted-installer-agent-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:multicluster_engine"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Multicluster Engine for Kubernetes",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "multicluster-engine/assisted-installer-reporter-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:multicluster_engine"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Multicluster Engine for Kubernetes",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "multicluster-engine/assisted-installer-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:multicluster_engine"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Multicluster Engine for Kubernetes",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "multicluster-engine/hive-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:multicluster_engine"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift API for Data Protection",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "oadp/oadp-velero-plugin-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_api_data_protection:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Developer Tools and Services",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ocp-tools-4/jenkins-agent-base-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:ocp_tools"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Developer Tools and Services",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ocp-tools-4/jenkins-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:ocp_tools"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Serverless",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-serverless-1/client-kn-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:serverless:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Serverless",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-serverless-clients",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:serverless:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Source-to-Image (S2I) Builder Image",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "source-to-image/source-to-image-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:source_to_image:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhacm2-tech-preview/submariner-rhel8-operator",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-main-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-main-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 1.2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-clients",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-clients",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "buildah",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "podman",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "skopeo",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:4.0/buildah",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:4.0/conmon",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:4.0/containers-common",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:4.0/podman",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:4.0/skopeo",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:rhel8/buildah",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:rhel8/conmon",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:rhel8/containers-common",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:rhel8/podman",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-tools:rhel8/skopeo",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "osbuild-composer",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "buildah",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "conmon",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "containers-common",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "osbuild-composer",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "podman",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "skopeo",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 3.11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "atomic-openshift",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:3.11"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 3.11",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "podman",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:3.11"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "buildah",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "conmon",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "containers-common",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "cri-o",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/oc-mirror-plugin-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-agent-installer-api-server-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-agent-installer-csr-approver-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-agent-installer-node-agent-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-agent-installer-orchestrator-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-baremetal-installer-rhel7",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-cli",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-cli-artifacts",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-deployer",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-docker-builder",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-installer",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-installer-altinfra-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-installer-artifacts",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-machine-config-operator",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-olm-operator-controller-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-olm-rukpak-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-openshift-apiserver-rhel7",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-openshift-proxy-pull-test-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-operator-lifecycle-manager",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-operator-registry",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-tools-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-clients",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ose-installer-terraform-providers-container",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ose-openshift-controller-manager-container",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "podman",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "skopeo",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform Assisted Installer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/assisted-installer-agent-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:assisted_installer:"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform Assisted Installer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/assisted-installer-reporter-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:assisted_installer:"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform Assisted Installer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/assisted-installer-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:assisted_installer:"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Dev Spaces",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "devspaces/udi-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift_devspaces:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Openshift sandboxed containers",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-sandboxed-containers/osc-must-gather-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift_sandboxed_containers:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Openshift sandboxed containers",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-sandboxed-containers-tech-preview/osc-rhel8-operator",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openshift_sandboxed_containers:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-apiserver",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-apiserver-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-cloner",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-cloner-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-controller",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-controller-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-importer",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-importer-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-operator",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-operator-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-uploadproxy",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-uploadserver",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Virtualization 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "container-native-virtualization/virt-cdi-uploadserver-rhel9",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:container_native_virtualization:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenStack Platform 16.2",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "osp-director-provisioner-container",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:openstack:16.2"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "quay/quay-builder-rhel8",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/a:redhat:quay:3"
    ]
  }
]