Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:advanced_cluster_security:3.68:*:*:*:*:kubernates:*:*

part: a version: 3.68 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAdvanced Cluster Security (0b3dd699-404e-5d9e-8e4a-dd1d017c80f4)
Edition*
Language*
Software edition*
Target softwarekubernates
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/rohankumardubey/stackrox purl2cpe 2026-06-01 10:12:56.711396
pkg:github/stackrox/stackrox purl2cpe 2026-06-01 10:12:56.711398

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1902 vulnerable 2026-06-08 05:39:14.200492 Details available
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate their privileges.
Published: 2022-09-01T19:54:44.000Z
Updated: 2024-08-03T00:17:00.984Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.