CVE-2024-7387
Estado: AplazadaCrítica (9.1)—
A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 9.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.32%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-250
Referencias
- https://access.redhat.com/errata/RHSA-2024:3718
- https://access.redhat.com/errata/RHSA-2024:6122
- https://access.redhat.com/errata/RHSA-2024:6685
- https://access.redhat.com/errata/RHSA-2024:6687
- https://access.redhat.com/errata/RHSA-2024:6689
- https://access.redhat.com/errata/RHSA-2024:6691
- https://access.redhat.com/errata/RHSA-2024:6705
- https://access.redhat.com/security/cve/CVE-2024-7387
- https://bugzilla.redhat.com/show_bug.cgi?id=2302259
- https://github.com/openshift/builder/commit/0b62633adfa2836465202bc851885e078ec888d1
- https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-7387",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-7387",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-10-07T20:31:09.766421Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 9.1,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2.3
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0b62633adfa2836465202bc851885e078ec888d1",
"versionType": "git"
}
],
"packageName": "openshift/builder",
"collectionURL": "https://github.com/openshift/builder",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.12",
"versions": [
{
"status": "unaffected",
"version": "v4.12.0-202409121032.p1.g609473f.assembly.stream.el8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.13::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.13",
"versions": [
{
"status": "unaffected",
"version": "v4.13.0-202409120505.p1.g2c7e99d.assembly.stream.el8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.14::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.14",
"versions": [
{
"status": "unaffected",
"version": "v4.14.0-202409111409.p1.g52565ca.assembly.stream.el8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.15::el8",
"cpe:/a:redhat:openshift:4.15::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.15",
"versions": [
{
"status": "unaffected",
"version": "v4.15.0-202409101936.p1.ge7749a3.assembly.stream.el8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.16",
"versions": [
{
"status": "unaffected",
"version": "v4.16.0-202409101737.p1.gfee4b58.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.17",
"versions": [
{
"status": "unaffected",
"version": "v4.17.0-202409122005.p1.gcfcf3bd.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/aws-kms-encryption-provider-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/azure-kms-encryption-provider-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/azure-service-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/cloud-network-config-controller-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/container-networking-plugins-microshift-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/driver-toolkit-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/egress-router-cni-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/frr-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/insights-runtime-exporter-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/insights-runtime-extractor-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/kube-metrics-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/kubevirt-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/network-tools-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/openshift-route-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-agent-installer-api-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-agent-installer-utils-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-apiserver-network-proxy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gc395190.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-aws-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-aws-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-aws-pod-identity-webhook-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-cloud-node-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g987615c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-disk-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-disk-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-file-csi-driver-operator-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-file-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-baremetal-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-baremetal-installer-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-baremetal-machine-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-baremetal-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-baremetal-runtimecfg-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cli-artifacts-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cli-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-api-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-authentication-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-autoscaler-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-autoscaler-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-baremetal-operator-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-bootstrap-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-capi-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g3385690.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-cloud-controller-manager-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-config-api-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-config-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-control-plane-machine-set-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-dns-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-etcd-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-image-registry-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-ingress-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502101302.p0.g763313c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-kube-apiserver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-kube-cluster-api-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-kube-controller-manager-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041632.p0.g6182930.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-kube-scheduler-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-machine-approver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-monitoring-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-network-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-olm-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-openshift-apiserver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-openshift-controller-manager-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-policy-controller-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-samples-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-storage-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-update-keys-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-cluster-version-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-configmap-reloader-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-console-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-console-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-container-networking-plugins-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-coredns-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-driver-manila-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-driver-manila-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-driver-nfs-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-external-attacher-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-external-provisioner-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-external-resizer-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-external-snapshotter-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-livenessprobe-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-node-driver-registrar-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-snapshot-controller-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-csi-snapshot-validation-webhook-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-deployer-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501281202.p0.g336d783.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-builder-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-docker-registry-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g914783c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-etcd-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-gcp-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-gcp-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-gcp-pd-csi-driver-operator-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-gcp-pd-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-gcp-workload-identity-federation-webhook-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502010001.p0.g061909a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-haproxy-router-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-hyperkube-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-hypershift-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ibmcloud-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ibm-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ibmcloud-machine-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ibm-vpc-block-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ge905646.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-image-customization-controller-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-insights-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-installer-altinfra-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-installer-artifacts-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-installer-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ironic-agent-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ironic-machine-os-downloader-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ironic-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ironic-static-ip-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-keepalived-ipfailover-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-kube-proxy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g526498a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-kube-rbac-proxy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-kube-state-metrics-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-kube-storage-version-migrator-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-kubevirt-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-libvirt-machine-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-api-provider-aws-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-api-provider-azure-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ga371641.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-api-provider-gcp-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-api-provider-openstack-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-api-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-config-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-machine-os-images-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-multus-admission-controller-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-multus-cni-microshift-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-multus-cni-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-multus-networkpolicy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-multus-route-override-cni-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-multus-whereabouts-ipam-cni-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502040032.p0.gc864494.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-must-gather-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-network-interface-bond-cni-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-network-metrics-daemon-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-nutanix-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-nutanix-machine-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-oauth-apiserver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-oauth-proxy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd352778.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-oauth-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-olm-catalogd-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-olm-operator-controller-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openshift-apiserver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openshift-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openshift-state-metrics-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-openstack-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-operator-framework-tools-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-operator-marketplace-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-operator-registry-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-ovn-kubernetes-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-pod-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-powervs-block-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-powervs-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-powervs-machine-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prometheus-alertmanager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prometheus-config-reloader-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prometheus-node-exporter-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prometheus-operator-admission-webhook-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prometheus-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prometheus-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-prom-label-proxy-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-service-ca-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g700802f.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-telemeter-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-tests-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g314589c.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-thanos-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-tools-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vsphere-cloud-controller-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vsphere-cluster-api-controllers-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vsphere-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vsphere-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ose-vsphere-problem-detector-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ovirt-csi-driver-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift4/ovirt-csi-driver-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "418.94.202502100215-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhcos",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
}
]
}
],
"published": "2024-09-17T00:15:52.757",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:3718",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:6122",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:6685",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:6687",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:6689",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:6691",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:6705",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-7387",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302259",
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/openshift/builder/commit/0b62633adfa2836465202bc851885e078ec888d1",
"source": "secalert@redhat.com"
},
{
"url": "https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html",
"source": "secalert@redhat.com"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"description": [
{
"lang": "en",
"value": "CWE-250"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container."
},
{
"lang": "es",
"value": "Se encontró una falla en openshift/builder. Esta vulnerabilidad permite la inyección de comandos a través de un path traversal, donde un usuario malintencionado puede ejecutar comandos arbitrarios en el nodo OpenShift que ejecuta el contenedor de compilación. Al utilizar la estrategia “Docker”, los archivos ejecutables dentro del contenedor de compilación privilegiado se pueden anular utilizando el atributo `spec.source.secrets.secret.destinationDir` de la definición `BuildConfig`. Un atacante que ejecute código en un contenedor privilegiado podría aumentar sus permisos en el nodo que ejecuta el contenedor."
}
],
"lastModified": "2026-08-11T16:17:24.387",
"sourceIdentifier": "secalert@redhat.com"
}