Details of VAR-202201-0073

ID

VAR-202201-0073

CVE

CVE-2021-46143

TITLE

Expat Integer overflow vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-017676

DESCRIPTION

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. Expat ( alias libexpat) Exists in an integer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Expat is a fast streaming XML parser written in C. There is a vulnerability in Expat versions before 2.4.3. The vulnerability stems from the fact that m_groupSize in Expat's xmlparse.c does not correctly verify the data boundary when performing operations on memory, resulting in incorrect read and write operations to other associated memory locations. No detailed vulnerability details were provided at this time. Summary: The Migration Toolkit for Containers (MTC) 1.5.4 is now available. Description: The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API. Bugs fixed (https://bugzilla.redhat.com/): 1995656 - CVE-2021-36221 golang: net/http/httputil: panic due to racy read of persistConn after handler panic 5. Description: Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Bugs fixed (https://bugzilla.redhat.com/): 2062751 - CVE-2022-24730 argocd: path traversal and improper access control allows leaking out-of-bound files 2062755 - CVE-2022-24731 argocd: path traversal allows leaking out-of-bound files 2064682 - CVE-2022-1025 Openshift-Gitops: Improper access control allows admin privilege escalation 5. Summary: Red Hat Advanced Cluster Management for Kubernetes 2.3.8 General Availability release images, which provide security and container updates. Description: Red Hat Advanced Cluster Management for Kubernetes 2.3.8 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.3/html/release_notes/ Security updates: * nanoid: Information disclosure via valueOf() function (CVE-2021-23566) * nodejs-shelljs: improper privilege management (CVE-2022-0144) * follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor (CVE-2022-0155) * node-fetch: exposure of sensitive information to an unauthorized actor (CVE-2022-0235) * follow-redirects: Exposure of Sensitive Information via Authorization Header leak (CVE-2022-0536) Bug fix: * RHACM 2.3.8 images (Bugzilla #2062316) 3. Bugs fixed (https://bugzilla.redhat.com/): 2043535 - CVE-2022-0144 nodejs-shelljs: improper privilege management 2044556 - CVE-2022-0155 follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor 2044591 - CVE-2022-0235 node-fetch: exposure of sensitive information to an unauthorized actor 2050853 - CVE-2021-23566 nanoid: Information disclosure via valueOf() function 2053259 - CVE-2022-0536 follow-redirects: Exposure of Sensitive Information via Authorization Header leak 2062316 - RHACM 2.3.8 images 5. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: xmlrpc-c security update Advisory ID: RHSA-2022:7692-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:7692 Issue date: 2022-11-08 CVE Names: CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 ==================================================================== 1. Summary: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Package List: Red Hat Enterprise Linux BaseOS (v. 8): Source: xmlrpc-c-1.51.0-8.el8.src.rpm aarch64: xmlrpc-c-1.51.0-8.el8.aarch64.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.aarch64.rpm ppc64le: xmlrpc-c-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debugsource-1.51.0-8.el8.ppc64le.rpm s390x: xmlrpc-c-1.51.0-8.el8.s390x.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client-1.51.0-8.el8.s390x.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debugsource-1.51.0-8.el8.s390x.rpm x86_64: xmlrpc-c-1.51.0-8.el8.i686.rpm xmlrpc-c-1.51.0-8.el8.x86_64.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client-1.51.0-8.el8.i686.rpm xmlrpc-c-client-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.i686.rpm xmlrpc-c-debugsource-1.51.0-8.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v. 8): aarch64: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-c++-1.51.0-8.el8.aarch64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client++-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.aarch64.rpm xmlrpc-c-devel-1.51.0-8.el8.aarch64.rpm ppc64le: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-c++-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client++-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debugsource-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-devel-1.51.0-8.el8.ppc64le.rpm s390x: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-c++-1.51.0-8.el8.s390x.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client++-1.51.0-8.el8.s390x.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debugsource-1.51.0-8.el8.s390x.rpm xmlrpc-c-devel-1.51.0-8.el8.s390x.rpm x86_64: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-c++-1.51.0-8.el8.i686.rpm xmlrpc-c-c++-1.51.0-8.el8.x86_64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client++-1.51.0-8.el8.i686.rpm xmlrpc-c-client++-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.i686.rpm xmlrpc-c-debugsource-1.51.0-8.el8.x86_64.rpm xmlrpc-c-devel-1.51.0-8.el8.i686.rpm xmlrpc-c-devel-1.51.0-8.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-46143 https://access.redhat.com/security/cve/CVE-2022-22822 https://access.redhat.com/security/cve/CVE-2022-22823 https://access.redhat.com/security/cve/CVE-2022-22824 https://access.redhat.com/security/cve/CVE-2022-22825 https://access.redhat.com/security/cve/CVE-2022-22826 https://access.redhat.com/security/cve/CVE-2022-22827 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY2pSTdzjgjWX9erEAQiDfRAAmj50JYZkSqq4Y57nQvXRqPdFwkfMdgR5 Vot+lbhYR4m2oFhZ0F6Ow4hi60EddVBoyULspeJky1ReuEDn2ou5iw9ScdHFs1nG LF9Wjz+VSNr/619VhHsBRIjlMO7GRa3DYyjJ8LCFdOOcl5IJb6p5wGIQmkEaQo/5 K/kxbNW4XsuVu2p6JkI54pjTyiEoYFxnd2O+cb97aAcnyqxMexV463bkrOCJ0leU JOVf4PXyRaCt5a2AawgJ3yDXhVGWnex+wotylt9F2gttOyLoAKbe73aOYCFszeA8 0z7Bb0GTyKX5OBQltrtJvt+m4bQvQPfTryEDQGeUQv4mnnsUvRkQ7BfoyRLDWuOd IlV+PrQesSsUi3L3VjtZr0MJCNV6A1s7uqC8piac7n1Vrod/pY6ZOxrSUvzoSbgZ XaVZ5Ay/n2TafyxxJ5iZCUm+FOtW28fH8VnTrZeQoLy9xLlAmSH+uS3EEiy+OsxI nv73jUqWLIbgJGTcOgWg24BMmL+ICNaCOjBXkUuA5WGMfLMdtVTN1gKniJ2dPp6Y qKJ4S8aUQ0Ecq0q7HkJ29zatTHystEo60HWOl54pMLQUjIGaITxWaY8aJcvCDQZ7 uOxWKJyMgNeyNZc7UYvZW0UFWnzXBtcwEjyZJDg3u3/IR8RU9ARX0cF73Fm40c5S ZzcPNNMPHw0=wFwS -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce

Trust: 2.25

sources: NVD: CVE-2021-46143 // JVNDB: JVNDB-2021-017676 // VULHUB: VHN-411370 // VULMON: CVE-2021-46143 // PACKETSTORM: 166789 // PACKETSTORM: 166431 // PACKETSTORM: 166437 // PACKETSTORM: 166516 // PACKETSTORM: 169788

AFFECTED PRODUCTS

vendor:	netapp	model:	active iq unified manager	scope:	eq	version:	-	Trust: 1.0
vendor:	libexpat	model:	libexpat	scope:	lt	version:	2.4.3	Trust: 1.0
vendor:	netapp	model:	oncommand workflow automation	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	clustered data ontap	scope:	eq	version:	-	Trust: 1.0
vendor:	tenable	model:	nessus	scope:	lt	version:	8.15.3	Trust: 1.0
vendor:	netapp	model:	hci baseboard management controller	scope:	eq	version:	h610s	Trust: 1.0
vendor:	tenable	model:	nessus	scope:	gte	version:	10.0.0	Trust: 1.0
vendor:	netapp	model:	hci baseboard management controller	scope:	eq	version:	h610c	Trust: 1.0
vendor:	siemens	model:	sinema remote connect server	scope:	lt	version:	3.1	Trust: 1.0
vendor:	netapp	model:	solidfire \& hci management node	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	hci baseboard management controller	scope:	eq	version:	h615c	Trust: 1.0
vendor:	tenable	model:	nessus	scope:	lt	version:	10.1.1	Trust: 1.0
vendor:	netapp	model:	active iq unified manager	scope:	-	version:	-	Trust: 0.8
vendor:	netapp	model:	clustered data ontap	scope:	-	version:	-	Trust: 0.8
vendor:	libexpat	model:	libexpat	scope:	-	version:	-	Trust: 0.8
vendor:	netapp	model:	oncommand workflow automation	scope:	-	version:	-	Trust: 0.8
vendor:	tenable	model:	nessus	scope:	-	version:	-	Trust: 0.8
vendor:	netapp	model:	solidfire & hci management node	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	日立高信頼サーバ rv3000	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	sinema remote connect server	scope:	-	version:	-	Trust: 0.8
vendor:	netapp	model:	hci baseboard management controller	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-017676 // NVD: CVE-2021-46143

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-46143
value:	HIGH
Trust: 1.0
cve@mitre.org:	CVE-2021-46143
value:	HIGH
Trust: 1.0
NVD:	CVE-2021-46143
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202201-417
value:	HIGH
Trust: 0.6
VULHUB:	VHN-411370
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2021-46143
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2021-46143
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-411370
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-46143
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
cve@mitre.org:	CVE-2021-46143
baseSeverity:	HIGH
baseScore:	8.1
vectorString:	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.2
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2021-46143
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-411370 // VULMON: CVE-2021-46143 // CNNVD: CNNVD-202201-417 // JVNDB: JVNDB-2021-017676 // NVD: CVE-2021-46143 // NVD: CVE-2021-46143

PROBLEMTYPE DATA

problemtype:	CWE-190	Trust: 1.1
problemtype:	Integer overflow or wraparound (CWE-190) [NVD evaluation ]	Trust: 0.8

sources: VULHUB: VHN-411370 // JVNDB: JVNDB-2021-017676 // NVD: CVE-2021-46143

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202201-417

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202201-417

PATCH

title:	hitachi-sec-2023-204	url:	https://github.com/libexpat/libexpat/issues/532	Trust: 0.8
title:	Expat Enter the fix for the verification error vulnerability	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=178019	Trust: 0.6
title:	Red Hat: CVE-2021-46143	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2021-46143	Trust: 0.1
title:	Red Hat: Important: expat security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20220951 - Security Advisory	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2022-1603	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2022-1603	Trust: 0.1
title:	Red Hat: Important: Red Hat OpenShift GitOps security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221039 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Migration Toolkit for Containers (MTC) 1.7.1 security and bug fix update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221734 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat OpenShift GitOps security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221041 - Security Advisory	Trust: 0.1
title:	Red Hat: Low: Release of OpenShift Serverless Version 1.22.0	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221747 - Security Advisory	Trust: 0.1
title:	Debian Security Advisories: DSA-5073-1 expat -- security update	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=131f3d669e0814049dd7f5b87ef0af84	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2022-1809	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2022-1809	Trust: 0.1
title:	Red Hat: Important: Red Hat OpenShift GitOps security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221042 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Red Hat Advanced Cluster Management 2.3.8 security and container updates	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221083 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Red Hat Advanced Cluster Management 2.4.3 security updates and bug fixes	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221476 - Security Advisory	Trust: 0.1
title:	Tenable Security Advisories: [R1] Nessus Versions 8.15.3 and 10.1.1 Fix Multiple Third-Party Vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2022-05	Trust: 0.1
title:	Amazon Linux 2022: ALAS2022-2022-017	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2022&qid=ALAS2022-2022-017	Trust: 0.1
title:	Red Hat: Moderate: Migration Toolkit for Containers (MTC) 1.5.4 security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221396 - Security Advisory	Trust: 0.1
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=ec6577109e640dac19a6ddb978afe82d	Trust: 0.1
title:	myapp-container-jaxrs	url:	https://github.com/akiraabe/myapp-container-jaxrs	Trust: 0.1

sources: VULMON: CVE-2021-46143 // CNNVD: CNNVD-202201-417 // JVNDB: JVNDB-2021-017676

EXTERNAL IDS

db:	NVD	id:	CVE-2021-46143	Trust: 3.9
db:	OPENWALL	id:	OSS-SECURITY/2022/01/17/3	Trust: 1.7
db:	SIEMENS	id:	SSA-484086	Trust: 1.7
db:	TENABLE	id:	TNS-2022-05	Trust: 1.7
db:	ICS CERT	id:	ICSA-22-167-17	Trust: 1.4
db:	PACKETSTORM	id:	169788	Trust: 0.8
db:	PACKETSTORM	id:	166437	Trust: 0.8
db:	PACKETSTORM	id:	166516	Trust: 0.8
db:	ICS CERT	id:	ICSA-23-278-01	Trust: 0.8
db:	JVN	id:	JVNVU99030761	Trust: 0.8
db:	JVN	id:	JVNVU97425465	Trust: 0.8
db:	JVNDB	id:	JVNDB-2021-017676	Trust: 0.8
db:	PACKETSTORM	id:	167008	Trust: 0.7
db:	PACKETSTORM	id:	166496	Trust: 0.7
db:	PACKETSTORM	id:	166976	Trust: 0.7
db:	PACKETSTORM	id:	166348	Trust: 0.7
db:	PACKETSTORM	id:	169541	Trust: 0.7
db:	PACKETSTORM	id:	168578	Trust: 0.7
db:	CS-HELP	id:	SB2022072065	Trust: 0.6
db:	CS-HELP	id:	SB2022072710	Trust: 0.6
db:	CS-HELP	id:	SB2022021425	Trust: 0.6
db:	CS-HELP	id:	SB2022060617	Trust: 0.6
db:	CS-HELP	id:	SB2022032843	Trust: 0.6
db:	CS-HELP	id:	SB2022072608	Trust: 0.6
db:	CS-HELP	id:	SB2022070734	Trust: 0.6
db:	CS-HELP	id:	SB2022041954	Trust: 0.6
db:	CS-HELP	id:	SB2022032013	Trust: 0.6
db:	CS-HELP	id:	SB2022011713	Trust: 0.6
db:	CS-HELP	id:	SB2022031627	Trust: 0.6
db:	CS-HELP	id:	SB2022022416	Trust: 0.6
db:	CS-HELP	id:	SB2022070605	Trust: 0.6
db:	CS-HELP	id:	SB2022020902	Trust: 0.6
db:	CS-HELP	id:	SB2022033002	Trust: 0.6
db:	CS-HELP	id:	SB2022032445	Trust: 0.6
db:	CS-HELP	id:	SB2022042116	Trust: 0.6
db:	PACKETSTORM	id:	166812	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0626	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.4174	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1677	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1154	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1263	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.2025	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3299	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0369	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0749	Trust: 0.6
db:	CNNVD	id:	CNNVD-202201-417	Trust: 0.6
db:	PACKETSTORM	id:	166431	Trust: 0.2
db:	PACKETSTORM	id:	166433	Trust: 0.1
db:	PACKETSTORM	id:	169540	Trust: 0.1
db:	CNVD	id:	CNVD-2022-04545	Trust: 0.1
db:	VULHUB	id:	VHN-411370	Trust: 0.1
db:	VULMON	id:	CVE-2021-46143	Trust: 0.1
db:	PACKETSTORM	id:	166789	Trust: 0.1

sources: VULHUB: VHN-411370 // VULMON: CVE-2021-46143 // PACKETSTORM: 166789 // PACKETSTORM: 166431 // PACKETSTORM: 166437 // PACKETSTORM: 166516 // PACKETSTORM: 169788 // CNNVD: CNNVD-202201-417 // JVNDB: JVNDB-2021-017676 // NVD: CVE-2021-46143

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2021-46143	Trust: 1.8
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf	Trust: 1.7
url:	https://security.netapp.com/advisory/ntap-20220121-0006/	Trust: 1.7
url:	https://www.tenable.com/security/tns-2022-05	Trust: 1.7
url:	https://www.debian.org/security/2022/dsa-5073	Trust: 1.7
url:	https://security.gentoo.org/glsa/202209-24	Trust: 1.7
url:	https://github.com/libexpat/libexpat/issues/532	Trust: 1.7
url:	https://github.com/libexpat/libexpat/pull/538	Trust: 1.7
url:	http://www.openwall.com/lists/oss-security/2022/01/17/3	Trust: 1.7
url:	https://jvn.jp/vu/jvnvu99030761/index.html	Trust: 0.8
url:	https://jvn.jp/vu/jvnvu97425465/index.html	Trust: 0.8
url:	https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-17	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-278-01	Trust: 0.8
url:	https://us-cert.cisa.gov/ics/advisories/icsa-22-167-17	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022072710	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022031627	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1154	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022021425	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022022416	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022041954	Trust: 0.6
url:	https://packetstormsecurity.com/files/166976/red-hat-security-advisory-2022-1734-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022020902	Trust: 0.6
url:	https://packetstormsecurity.com/files/166516/red-hat-security-advisory-2022-1083-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.4174	Trust: 0.6
url:	https://packetstormsecurity.com/files/169541/red-hat-security-advisory-2022-7143-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/166348/red-hat-security-advisory-2022-0951-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032843	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022070605	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022072608	Trust: 0.6
url:	https://vigilance.fr/vulnerability/expat-integer-overflow-via-doprolog-37270	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032445	Trust: 0.6
url:	https://packetstormsecurity.com/files/166496/red-hat-security-advisory-2022-1069-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/168578/gentoo-linux-security-advisory-202209-24.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022072065	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1263	Trust: 0.6
url:	https://packetstormsecurity.com/files/169788/red-hat-security-advisory-2022-7692-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022060617	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022042116	Trust: 0.6
url:	https://packetstormsecurity.com/files/166812/red-hat-security-advisory-2022-1476-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032013	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022033002	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022011713	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0749	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0626	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3299	Trust: 0.6
url:	https://packetstormsecurity.com/files/167008/red-hat-security-advisory-2022-1747-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/166437/red-hat-security-advisory-2022-1039-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.2025	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0369	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1677	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022070734	Trust: 0.6
url:	https://bugzilla.redhat.com/):	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-22822	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-22823	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-22827	Trust: 0.5
url:	https://access.redhat.com/security/team/contact/	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-22826	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-22824	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-22825	Trust: 0.5
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2021-46143	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-25315	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2022-25236	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2022-25235	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2022-23308	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2022-23852	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2021-31566	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2021-23177	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2021-3999	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2022-23219	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2021-45960	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2022-23218	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2021-23177	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2021-31566	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22825	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22823	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22824	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22822	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2020-25710	Trust: 0.3
url:	https://access.redhat.com/security/updates/classification/#moderate	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25710	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0392	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0261	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25709	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0413	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-24407	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0361	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0359	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0318	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2020-25709	Trust: 0.3
url:	https://access.redhat.com/articles/11258	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22826	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2021-45960	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3999	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22827	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0492	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-4154	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-0920	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0847	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0435	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-22942	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0330	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0516	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-0920	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1025	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23219	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0361	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0261	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24407	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0318	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-24731	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23218	Trust: 0.2
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24730	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23308	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0413	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-24730	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0359	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0392	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-1025	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23852	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-22925	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-19603	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-20838	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-21684	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-12762	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-36085	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-16135	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-36084	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-20231	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-20232	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-28153	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-41190	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3445	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-36086	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-4122	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-17594	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-36087	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-22898	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-42574	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-5827	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-19603	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-18218	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-14155	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-13435	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-33560	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-16135	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-14155	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-17595	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-13751	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3426	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-22817	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3572	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-20232	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-20838	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-22925	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-44716	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1396	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-17594	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-22876	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-13750	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-12762	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-3577	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-13435	Trust: 0.1
url:	https://docs.openshift.com/container-platform/latest/migration_toolkit_for_containers/installing-mtc.html	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-36221	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-28153	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-18218	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0532	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-22876	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2014-3577	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-22898	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-22816	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3580	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3800	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-21684	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-13751	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-17595	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3200	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-24370	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-20231	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-24370	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0778	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-5827	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-13750	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3521	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-44717	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1042	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0811	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0811	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25236	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25315	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24731	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25235	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1039	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0235	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0155	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0235	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0516	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0536	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.3/html-single/install/index#installing	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.3/html/release_notes/index	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0492	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0536	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1083	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0144	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-23566	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0435	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0847	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0330	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.3/html/release_notes/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-4154	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0144	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-23566	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0155	Trust: 0.1
url:	https://access.redhat.com/security/team/key/	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:7692	Trust: 0.1

sources: VULHUB: VHN-411370 // PACKETSTORM: 166789 // PACKETSTORM: 166431 // PACKETSTORM: 166437 // PACKETSTORM: 166516 // PACKETSTORM: 169788 // CNNVD: CNNVD-202201-417 // JVNDB: JVNDB-2021-017676 // NVD: CVE-2021-46143

CREDITS

Siemens notified CISA of these vulnerabilities.

Trust: 0.6

sources: CNNVD: CNNVD-202201-417

SOURCES

db:	VULHUB	id:	VHN-411370
db:	VULMON	id:	CVE-2021-46143
db:	PACKETSTORM	id:	166789
db:	PACKETSTORM	id:	166431
db:	PACKETSTORM	id:	166437
db:	PACKETSTORM	id:	166516
db:	PACKETSTORM	id:	169788
db:	CNNVD	id:	CNNVD-202201-417
db:	JVNDB	id:	JVNDB-2021-017676
db:	NVD	id:	CVE-2021-46143

LAST UPDATE DATE

2026-02-08T22:51:24.186000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-411370	date:	2022-10-06T00:00:00
db:	VULMON	id:	CVE-2021-46143	date:	2022-10-06T00:00:00
db:	CNNVD	id:	CNNVD-202201-417	date:	2022-11-09T00:00:00
db:	JVNDB	id:	JVNDB-2021-017676	date:	2023-10-10T05:52:00
db:	NVD	id:	CVE-2021-46143	date:	2025-05-05T17:17:28.820

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-411370	date:	2022-01-06T00:00:00
db:	VULMON	id:	CVE-2021-46143	date:	2022-01-06T00:00:00
db:	PACKETSTORM	id:	166789	date:	2022-04-20T15:12:33
db:	PACKETSTORM	id:	166431	date:	2022-03-24T14:34:35
db:	PACKETSTORM	id:	166437	date:	2022-03-24T14:40:17
db:	PACKETSTORM	id:	166516	date:	2022-03-29T15:53:19
db:	PACKETSTORM	id:	169788	date:	2022-11-08T13:52:57
db:	CNNVD	id:	CNNVD-202201-417	date:	2022-01-06T00:00:00
db:	JVNDB	id:	JVNDB-2021-017676	date:	2023-01-31T00:00:00
db:	NVD	id:	CVE-2021-46143	date:	2022-01-06T04:15:07.017