Lucene search
RedHatRHSA-2022:9058HistoryDec 15, 2022 - 3:08 p.m.
(RHSA-2022:9058) Important: prometheus-jmx-exporter security update
2022-12-1515:08:09
access.redhat.com
27
0.008 Low
EPSS
Percentile
81.8%
Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.
Security Fix(es):
- SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | noarch | prometheus-jmx-exporter-openjdk17 | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-openjdk17-0.12.0-9.el8_7.noarch.rpm |
| RedHat | 8 | noarch | prometheus-jmx-exporter | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-0.12.0-9.el8_7.noarch.rpm |
| RedHat | 8 | noarch | prometheus-jmx-exporter-openjdk11 | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-openjdk11-0.12.0-9.el8_7.noarch.rpm |
| RedHat | 8 | noarch | prometheus-jmx-exporter-openjdk8 | < 0.12.0-9.el8_7 | prometheus-jmx-exporter-openjdk8-0.12.0-9.el8_7.noarch.rpm |
Related
ibm
ibm
nessus
nessus
Atlassian Bitbucket < 7.21.16 / 8.8.7 / 8.9.4 / 8.10.3 / 8.11.3 / 8.12.2 RCE
2023-12-19 00:00:00
Atlassian Confluence 6.13.x < 7.13.18 / 7.14.x < 7.19.10 / 7.20.x < 8.3.1 (CONFSERVER-91463)
2023-12-13 00:00:00
Rocky Linux 8 : prometheus-jmx-exporter (RLSA-2022:9058)
2023-01-30 00:00:00
osv
osv
Important: prometheus-jmx-exporter security update
2022-12-15 15:08:09
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
nvd
nvd
CVE-2022-1471
2022-12-01 11:15:10
CVE-2023-46302
2023-11-20 09:15:07
f5
f5
K000132638 : SnakeYAML vulnerability CVE-2022-1471
2023-02-16 00:00:00
cgr
cgr
CVE-2022-1471 vulnerabilities
2024-04-30 09:06:13
hackerone
hackerone
atlassian
atlassian
RCE (Remote Code Execution) in - CVE-2022-1471
2023-10-08 08:44:33
oraclelinux
oraclelinux
prometheus-jmx-exporter security update
2022-12-15 00:00:00
cve
cve
CVE-2022-1471
2022-12-01 11:15:10
CVE-2023-46302
2023-11-20 09:15:07
almalinux
almalinux
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-12-02 17:22:00
redhatcve
redhatcve
CVE-2022-1471
2022-12-01 15:56:23
prion
prion
Deserialization of untrusted data
2022-12-01 11:15:00
Design/Logic Flaw
2023-11-20 09:15:00
ubuntucve
ubuntucve
CVE-2022-1471
2022-12-01 00:00:00
github
github
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
Deserialization of Untrusted Data in apache-submarine
2023-11-20 09:30:31
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Snakeyaml Project Snakeyaml
2023-03-02 16:33:02
cvelist
cvelist
CVE-2022-1471 Remote Code execution in SnakeYAML
2022-12-01 10:47:07
redos
redos
ROS-20240514-03
2024-05-14 00:00:00
debiancve
debiancve
CVE-2022-1471
2022-12-01 11:15:10
rocky
rocky
prometheus-jmx-exporter security update
2022-12-15 15:08:09
Satellite 6.13 Release
2023-05-05 15:39:58
metasploit
metasploit
PyTorch Model Server Registration and Deserialization RCE
2023-10-12 13:27:26
packetstorm
packetstorm
PyTorch Model Server Registration / Deserialization Remote Code Execution
2023-10-13 00:00:00
zdt
zdt
thn
thn
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
2023-10-03 16:24:00
Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution
2023-12-06 09:18:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-10-13 17:03:36
redhat
redhat
hivepro
hivepro
Atlassian Addresses Critical RCE Flaws
2023-12-07 12:45:52
qualysblog
qualysblog
Oracle Patch Update, April 2024 Security Update Review
2024-04-17 14:39:59
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00