Lucene search
K

CVE-2025-6020

🗓️ 17 Jun 2025 12:44:08Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 138 Views

Flaw in linux-pam allows local users to elevate privileges via symlink attacks and race conditions.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Vulnerabilities in pam library (CVE-2025-6020, CVE-2025-8941) affect Power HMC.
19 Nov 202508:44
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
3 Mar 202600:44
ibm
IBM Security Bulletins
Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities
31 Jul 202514:21
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in pam library (CVE-2025-6020) affects Power HMC.
9 Sep 202507:19
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to SQLite3 (CVE-2025-6965), pam_namespace (CVE-2025-6020), systemd-coredump (CVE-2025-4598) and Perl (CVE-2025-40909) packages shipped with IBM CICS TX Advanced.
9 Sep 202517:43
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc  packages shipped with IBM CICS TX Advanced.
12 Aug 202511:56
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak
20 Oct 202522:01
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc  packages shipped with IBM CICS TX Standard.
12 Aug 202511:48
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities discovered in RedHat UBI as shipped with IBM Security Verify Directory Server Container
8 Aug 202517:17
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to improper access control due to the linux-pam package (CVE-2025-6020)
4 Sep 202522:48
ibm
Rows per page
[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.7.1",
        "versionType": "semver"
      }
    ],
    "packageName": "linux-pam",
    "collectionURL": "https://github.com/linux-pam/linux-pam",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.6.1-8.el10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.6.1-8.el10_0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux_eus:10.0"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.1.8-23.el7_9.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_els:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-37.el8_10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-38.el8_10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-8.el8_2.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-14.el8_4.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-16.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-16.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-16.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/o:redhat:rhel_tus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-26.el8_8.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.3.1-26.el8_8.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-26.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-25.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-26.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-25.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-9.el9_0.2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.0::appstream",
      "cpe:/o:redhat:rhel_e4s:9.0::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-15.el9_2.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream",
      "cpe:/o:redhat:rhel_e4s:9.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pam",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.5.1-24.el9_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.4::appstream",
      "cpe:/o:redhat:rhel_eus:9.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.11 on RHEL 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "web-terminal/web-terminal-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.11-19",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:webterminal:1.11::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.11 on RHEL 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.11-8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:webterminal:1.11::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal 1.12 on RHEL 9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.12-4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:webterminal:1.12::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-4.1752066672",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-businesscentral-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-4.1752065732",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-controller-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-4.1752065732",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-3.1752065737",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-kieserver-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-4.1752065731",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-25",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-process-migration-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-4.1752065736",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-2.1752065733",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhpam-7/rhpam-smartrouter-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "7.13.5-4.1752065755",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-management-console-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-12",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-18",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-11",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "RHOSS-1.36-RHEL-8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.36.0-7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_serverless:1.36::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "cert-manager operator for Red Hat OpenShift 1.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "cert-manager/jetstack-cert-manager-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v1.16.5-1760515757",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Compliance Operator 1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "compliance/openshift-compliance-openscap-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.8.0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_compliance_operator:1::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "discovery/discovery-server-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.0.0-1752592913",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "discovery/discovery-server-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.2.1-1758555934",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Insights proxy 1.5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "insights-proxy/insights-proxy-container-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.5.7-1759331989",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:insights_proxy:1.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/opentelemetry-collector-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752046452",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/opentelemetry-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752046437",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/opentelemetry-target-allocator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752046439",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/tempo-gateway-opa-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752070865",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/tempo-gateway-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752070873",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/tempo-jaeger-query-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1751993590",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/tempo-query-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752070827",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/tempo-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752070833",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3.6.0",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhosdt/tempo-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "rhosdt-3.6-1752070866",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.10.2-1757422110",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.10.2-1757421804",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.10.2-1757421879",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift sandboxed containers 1.1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1.10.2-1757422401",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Jun 2026 12:56Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.8
EPSS0.00072
SSVC
138