CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
91.2%
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666)
Security Fix(es):
__Host-
or __Secure-
cookie by PHP applications (CVE-2022-31629)For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
access.redhat.com/errata/RHSA-2023:0848
access.redhat.com/security/cve/CVE-2022-31628
access.redhat.com/security/cve/CVE-2022-31629
access.redhat.com/security/cve/CVE-2022-31630
access.redhat.com/security/cve/CVE-2022-31631
access.redhat.com/security/cve/CVE-2022-37454
bugzilla.redhat.com/2133687
bugzilla.redhat.com/2133688
bugzilla.redhat.com/2139280
bugzilla.redhat.com/2140200
bugzilla.redhat.com/2158791
errata.almalinux.org/8/ALSA-2023-0848.html
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
91.2%