GCVE - cpe:2.3:a:redhat:service_interconnect:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:service_interconnect:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Service Interconnect (`d6a4f624-1e17-51bb-95b0-7fae15954fa7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-6535`	vulnerable	2026-06-08 06:58:19.718724	Skupper: potential authentication bypass to skupper console via forged cookies MEDIUM (5.3) A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie. Published: 2024-07-17T02:25:25.958Z Updated: 2025-11-20T19:54:25.623Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2024:4865 https://access.redhat.com/errata/RHSA-2024:4871 https://access.redhat.com/security/cve/CVE-2024-6535 https://bugzilla.redhat.com/show_bug.cgi?id=2296024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5056`	vulnerable	2026-06-08 06:19:41.325660	Skupper-operator: privelege escalation via config map MEDIUM (6.8) A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of the user's purview. Published: 2023-12-18T13:43:07.807Z Updated: 2025-11-20T07:02:56.903Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2023:6219 https://access.redhat.com/security/cve/CVE-2023-5056 https://bugzilla.redhat.com/show_bug.cgi?id=2239517	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44487`	vulnerable	2026-06-08 06:12:41.258760	Details available The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. Published: 2023-10-10T00:00:00.000Z Updated: 2026-07-14T12:03:17.389Z Open on db.gcve.eu Reference links https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73 https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ https://aws.amazon.com/security/security-bulletins/AWS-2023-011/ https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.