RHSA-2021:0423 Red Hat Security Advisory: OpenShift Container Platform 4.6.17 security and packages update

Bulletin has no description...

GHSA-544R-FC65-V832 Snipe-IT allows users to promote or demote themselves or other users

Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships via API call.This issue affects snipe-it: from v4.6.17 through v6.4.1...

Snipe-IT Security Breach

Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in Snipe-IT versions v4.6.17 through v6.4.1, which stems from an API call that allows users to make changes to group membership to promote or demote themselves or other users...