Lucene search

K

RedHatRHSA-2024:4836

HistoryJul 24, 2024 - 4:16 p.m.

(RHSA-2024:4836) Moderate: RHACS 4.5 enhancement and security update

2024-07-2416:16:52

access.redhat.com

4

rhacs 4.5

vulnerability management

compliance updates

email notifier

pki

network policy

cve-2024-28849

cve-2024-29903

CVSS3

8.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

75.3%

Release of RHACS 4.5 provides these changes:

New features:

Scanner V4 is generally available
Vulnerability Management 2.0 is generally available
Compliance updates
Built-in email notifier in RHACS Cloud Service
roxctl installation GitHub action
Bring your own PKI for signature verification
Build-time network policy tools updates
Enhanced RHACS Cloud Service experience

This releases updates the following items to patch vulnerabilities:

(CVE-2024-28849) The follow-redirect module was updated to 1.15.6.
(CVE-2024-29903) Updated cosign to 2.2.4.
(CVE-2024-29902) Updated cosign to 2.2.4.

For more information on new features and other details, see https://docs.openshift.com/acs/4.5/release_notes/45-release-notes.html.

CVSS3

8.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

75.3%