Red Hat OpenShift Container Platform for IBM Z 4.9
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.9:*:*:*:*:*:*:*
part: a version: 4.9 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift Container Platform For Ibm Z (5ef55185-4e24-527a-bcda-4fe359d6a739) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8883 |
vulnerable | 2026-06-08 07:00:25.929702 |
Keycloak: vulnerable redirect uri validation results in open redirec
MEDIUM (6.1)
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.
Published: 2024-09-19T15:48:28.468Z
Updated: 2026-04-01T13:27:25.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1132 |
vulnerable | 2026-06-08 06:25:39.333821 |
Keycloak: path transversal in redirection validation
HIGH (8.1)
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.
Published: 2024-04-17T13:21:19.130Z
Updated: 2026-05-16T23:26:21.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6291 |
vulnerable | 2026-06-08 06:19:46.867032 |
Keycloak: redirect_uri validation bypass
HIGH (7.1)
A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.
Published: 2024-01-26T14:23:43.185Z
Updated: 2025-11-11T16:12:14.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2585 |
vulnerable | 2026-06-08 06:02:42.581137 |
Keycloak: client access via device auth request spoof
LOW (3.5)
Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validation to spoof a client consent request and trick an authorization admin into granting consent to a malicious OAuth client or possible unauthorized access to an existing OAuth client.
Published: 2023-12-21T09:24:16.632Z
Updated: 2024-08-02T06:26:09.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4039 |
vulnerable | 2026-06-08 05:51:36.600836 |
Rhsso-container-image: unsecured management interface exposed to adjecent network
HIGH (8)
A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.
Published: 2023-09-22T14:00:39.803Z
Updated: 2024-09-24T14:29:55.579Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.