Lucene search

K
redhatRedHatRHSA-2023:1285
HistoryMar 16, 2023 - 7:48 a.m.

(RHSA-2023:1285) Important: Migration Toolkit for Runtimes security bug fix and enhancement update

2023-03-1607:48:56
access.redhat.com
31
migration toolkit
runtimes
security fix
cve-2022-3782
cve-2022-31690
cve-2022-46364
privilege escalation
ssrf vulnerability
unix

0.042 Low

EPSS

Percentile

92.3%

Migration Toolkit for Runtimes 1.0.2 ZIP artifacts

Security Fix(es):

  • keycloak: path traversal via double URL encoding (CVE-2022-3782)

  • spring-security-oauth2-client: Privilege Escalation in spring-security-oauth2-client (CVE-2022-31690)

  • Apache CXF: SSRF Vulnerability (CVE-2022-46364)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.