Lucene search
RedHatRHSA-2022:9058HistoryDec 15, 2022 - 3:08 p.m.
(RHSA-2022:9058) Important: prometheus-jmx-exporter security update
2022-12-1515:08:09
access.redhat.com
29
prometheus jmx exporter
snakeyaml
security update
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.036
Percentile
91.8%
Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.
Security Fix(es):
- SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | noarch | prometheus-jmx-exporter-openjdk11 | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-openjdk11-0.12.0-9.el8_7.noarch.rpm |
| RedHat | 8 | noarch | prometheus-jmx-exporter | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-0.12.0-9.el8_7.noarch.rpm |
| RedHat | 8 | noarch | prometheus-jmx-exporter-openjdk8 | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-openjdk8-0.12.0-9.el8_7.noarch.rpm |
| RedHat | 8 | noarch | prometheus-jmx-exporter-openjdk17 | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-openjdk17-0.12.0-9.el8_7.noarch.rpm |
Related
nessus
nessus
Rocky Linux 8 : prometheus-jmx-exporter (RLSA-2022:9058)
2023-01-30 00:00:00
Atlassian Confluence 6.13.x < 7.13.18 / 7.14.x < 7.19.10 / 7.20.x < 8.3.1 (CONFSERVER-91463)
2023-12-13 00:00:00
Atlassian Bitbucket < 7.21.16 / 8.8.7 / 8.9.4 / 8.10.3 / 8.11.3 / 8.12.2 RCE
2023-12-19 00:00:00
hackerone
hackerone
ibm
ibm
f5
f5
K000132638 : SnakeYAML vulnerability CVE-2022-1471
2023-02-16 00:00:00
oraclelinux
oraclelinux
prometheus-jmx-exporter security update
2022-12-15 00:00:00
osv
osv
CGA-p6jg-fjvm-fx3w
2024-06-06 12:28:39
Important: prometheus-jmx-exporter security update
2022-12-15 15:08:09
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
cve
cve
CVE-2022-1471
2022-12-01 11:15:10
CVE-2023-46302
2023-11-20 09:15:07
cgr
cgr
CVE-2022-1471 vulnerabilities
2024-04-30 09:06:13
atlassian
atlassian
RCE (Remote Code Execution) in - CVE-2022-1471
2023-10-08 08:44:33
nvd
nvd
CVE-2022-1471
2022-12-01 11:15:10
CVE-2023-46302
2023-11-20 09:15:07
almalinux
almalinux
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-12-02 17:22:00
redhatcve
redhatcve
CVE-2022-1471
2022-12-01 15:56:23
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Snakeyaml Project Snakeyaml
2023-03-02 16:33:02
prion
prion
Deserialization of untrusted data
2022-12-01 11:15:00
Design/Logic Flaw
2023-11-20 09:15:00
github
github
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
Deserialization of Untrusted Data in apache-submarine
2023-11-20 09:30:31
ubuntucve
ubuntucve
CVE-2022-1471
2022-12-01 00:00:00
debiancve
debiancve
CVE-2022-1471
2022-12-01 11:15:10
rocky
rocky
prometheus-jmx-exporter security update
2022-12-15 15:08:09
Satellite 6.13 Release
2023-05-05 15:39:58
redos
redos
ROS-20240514-03
2024-05-14 00:00:00
cvelist
cvelist
CVE-2022-1471 Remote Code execution in SnakeYAML
2022-12-01 10:47:07
metasploit
metasploit
PyTorch Model Server Registration and Deserialization RCE
2023-10-12 13:27:26
zdt
zdt
packetstorm
packetstorm
PyTorch Model Server Registration / Deserialization Remote Code Execution
2023-10-13 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-10-13 17:03:36
redhat
redhat
thn
thn
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
2023-10-03 16:24:00
Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution
2023-12-06 09:18:00
hivepro
hivepro
Atlassian Addresses Critical RCE Flaws
2023-12-07 12:45:52
qualysblog
qualysblog
Oracle Patch Update, April 2024 Security Update Review
2024-04-17 14:39:59
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.036
Percentile
91.8%
Related for RHSA-2022:9058