{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-7195","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","state":"PUBLISHED","assignerShortName":"redhat","dateReserved":"2025-07-07T08:45:21.278Z","datePublished":"2025-08-07T19:05:08.756Z","dateUpdated":"2026-07-21T00:37:15.622Z"},"containers":{"cna":{"title":"Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd","metrics":[{"other":{"content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"descriptions":[{"lang":"en","value":"Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. \n\nIn affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."}],"affected":[{"vendor":"operator-framework","product":"operator-sdk","versions":[{"status":"affected","version":"0","lessThan":"0.15.2","versionType":"semver"}],"packageName":"operator-sdk","collectionURL":"https://github.com/operator-framework/operator-sdk","defaultStatus":"unaffected"},{"vendor":"Red Hat","product":"RHEL-9-CNV-4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"container-native-virtualization/cluster-network-addons-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17.39-2","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:container_native_virtualization:4.17::el9"]},{"vendor":"Red Hat","product":"RHEL-9-CNV-4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"container-native-virtualization/cluster-network-addons-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18.25-3","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:container_native_virtualization:4.18::el9"]},{"vendor":"Red Hat","product":"RHEL-9-CNV-4.20","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"container-native-virtualization/cluster-network-addons-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v4.20.3-3","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:container_native_virtualization:4.20::el9"]},{"vendor":"Red Hat","product":"Compliance Operator 1","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"compliance/openshift-compliance-rhel8-operator","defaultStatus":"affected","versions":[{"version":"1.8.0","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"]},{"vendor":"Red Hat","product":"Compliance Operator 1","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"compliance/openshift-compliance-rhel8-operator","defaultStatus":"affected","versions":[{"version":"1768172669","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_compliance_operator:1::el9"]},{"vendor":"Red Hat","product":"Compliance Operator 1","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"compliance/openshift-file-integrity-rhel8-operator","defaultStatus":"affected","versions":[{"version":"v1.3","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/addon-manager-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/discovery-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/placement-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.6","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/work-rhel9","defaultStatus":"affected","versions":[{"version":"v2.6","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.6::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/addon-manager-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/discovery-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/managedcluster-import-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/placement-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/work-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/addon-manager-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/discovery-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/managedcluster-import-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/placement-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.7","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/work-rhel9","defaultStatus":"affected","versions":[{"version":"v2.7","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.7::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/addon-manager-rhel9","defaultStatus":"affected","versions":[{"version":"1765872406","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel9","defaultStatus":"affected","versions":[{"version":"1766360304","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/discovery-rhel9","defaultStatus":"affected","versions":[{"version":"1765669648","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/managedcluster-import-controller-rhel9","defaultStatus":"affected","versions":[{"version":"1765866268","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/placement-rhel9","defaultStatus":"affected","versions":[{"version":"1765872399","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-operator-rhel9","defaultStatus":"affected","versions":[{"version":"1765872402","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-rhel9","defaultStatus":"affected","versions":[{"version":"1765872398","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/work-rhel9","defaultStatus":"affected","versions":[{"version":"1765872400","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/addon-manager-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/discovery-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/managedcluster-import-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/placement-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-operator-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/registration-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.9","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/work-rhel9","defaultStatus":"affected","versions":[{"version":"v2.9","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:multicluster_engine:2.9::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.11","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/klusterlet-addon-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.11","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.11::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.11","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-application-rhel9","defaultStatus":"affected","versions":[{"version":"v2.11","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.11::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.11","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-channel-rhel9","defaultStatus":"affected","versions":[{"version":"v2.11","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.11::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.11","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-subscription-rhel9","defaultStatus":"affected","versions":[{"version":"v2.11","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.11::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/acm-cluster-permission-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/klusterlet-addon-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicloud-integrations-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-application-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-channel-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-subscription-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/klusterlet-addon-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.12","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/acm-cluster-permission-rhel9","defaultStatus":"affected","versions":[{"version":"1773285089","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicloud-integrations-rhel9","defaultStatus":"affected","versions":[{"version":"1773259164","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-application-rhel9","defaultStatus":"affected","versions":[{"version":"1773259182","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-channel-rhel9","defaultStatus":"affected","versions":[{"version":"1773358651","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.12","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-subscription-rhel9","defaultStatus":"affected","versions":[{"version":"1773090513","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.12::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/acm-cluster-permission-rhel9","defaultStatus":"affected","versions":[{"version":"1767569821","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/klusterlet-addon-controller-rhel9","defaultStatus":"affected","versions":[{"version":"1767829032","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/acm-cluster-permission-rhel9","defaultStatus":"affected","versions":[{"version":"1767569821","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/cluster-backup-rhel9-operator","defaultStatus":"affected","versions":[{"version":"1767656229","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/klusterlet-addon-controller-rhel9","defaultStatus":"affected","versions":[{"version":"1767829032","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/acm-cluster-permission-rhel9","defaultStatus":"affected","versions":[{"version":"v2.14","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/klusterlet-addon-controller-rhel9","defaultStatus":"affected","versions":[{"version":"v2.14","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicloud-integrations-rhel9","defaultStatus":"affected","versions":[{"version":"v2.14","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-application-rhel9","defaultStatus":"affected","versions":[{"version":"v2.14","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-channel-rhel9","defaultStatus":"affected","versions":[{"version":"v2.14","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-subscription-rhel9","defaultStatus":"affected","versions":[{"version":"v2.14","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicloud-integrations-rhel9","defaultStatus":"affected","versions":[{"version":"1769720041","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-application-rhel9","defaultStatus":"affected","versions":[{"version":"1770343757","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-channel-rhel9","defaultStatus":"affected","versions":[{"version":"1769721579","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/multicluster-operators-subscription-rhel9","defaultStatus":"affected","versions":[{"version":"1770336554","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:acm:2.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178221","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-cli-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178222","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-core-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178236","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178273","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178715","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178261","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-metrics-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178354","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178419","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178768","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cosi-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178319","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178386","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178406","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178615","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178379","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-must-gather-rhel9","defaultStatus":"affected","versions":[{"version":"v4.14-1764178329","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178423","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odr-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764178419","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.14","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/rook-ceph-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.14-1764215448","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176261","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-core-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176342","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764176372","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176892","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764176485","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-metrics-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176698","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764176699","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cli-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176675","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764177101","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cosi-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176690","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764221806","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764222436","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764177174","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764177033","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-must-gather-rhel9","defaultStatus":"affected","versions":[{"version":"v4.15-1764176958","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764177101","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odr-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764177020","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.15","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/rook-ceph-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.15-1764177029","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764168955","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-core-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169118","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764169242","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169544","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764169347","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-metrics-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169479","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764169526","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cli-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169464","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169687","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cosi-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169457","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764169527","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169577","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169730","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764169598","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-must-gather-rhel9","defaultStatus":"affected","versions":[{"version":"v4.16-1764169623","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764169710","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odr-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764170019","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.16","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/rook-ceph-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.16-1764170021","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764167834","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764167795","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-core-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764167826","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764167876","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168179","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764167987","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-metrics-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168476","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764168475","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cli-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168431","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168662","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cosi-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168475","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764168536","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168609","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168731","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764168699","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-must-gather-rhel9","defaultStatus":"affected","versions":[{"version":"v4.17-1764168859","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764169063","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odr-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764169125","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.17","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/rook-ceph-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.17-1764169222","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854289","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/cephcsi-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854280","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-core-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854280","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/mcg-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854319","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761855549","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-client-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854321","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-metrics-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854422","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/ocs-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854430","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cli-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854457","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854484","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-cosi-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854398","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854494","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-csi-addons-sidecar-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854493","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-console-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761854504","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-multicluster-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854489","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-must-gather-rhel9","defaultStatus":"affected","versions":[{"version":"v4.18-1761855467","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odf-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761854524","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/odr-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1762335558","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.18","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"odf4/rook-ceph-rhel9-operator","defaultStatus":"affected","versions":[{"version":"v4.18-1761855234","lessThan":"*","versionType":"rpm","status":"unaffected"}],"cpes":["cpe:/a:redhat:openshift_data_foundation:4.18::el9"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/addon-manager-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/clusterlifecycle-state-metrics-rhel8","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/discovery-rhel8","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/hypershift-addon-rhel8-operator","defaultStatus":"unknown","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/hypershift-addon-rhel9-operator","defaultStatus":"affected","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/managedcluster-import-controller-rhel8","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/placement-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/registration-operator-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/registration-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/work-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Global Hub","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-globalhub/multicluster-globalhub-agent-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:multicluster_globalhub"]},{"vendor":"Red Hat","product":"Multicluster Global Hub","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-globalhub/multicluster-globalhub-manager-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:multicluster_globalhub"]},{"vendor":"Red Hat","product":"Multicluster Global Hub","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-globalhub/multicluster-globalhub-rhel9-operator","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:multicluster_globalhub"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/acm-cluster-permission-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/acm-governance-policy-framework-addon-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/cert-policy-controller-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/config-policy-controller-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/endpoint-monitoring-rhel9-operator","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/governance-policy-propagator-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/grafana-dashboard-loader-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/iam-policy-controller-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/klusterlet-addon-controller-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/metrics-collector-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/multicloud-integrations-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/multicluster-observability-rhel9-operator","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/multicluster-operators-application-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/multicluster-operators-channel-rhel8","defaultStatus":"unknown","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/rbac-query-proxy-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhacm2/search-collector-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Security 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"advanced-cluster-security/rhacs-rhel8-operator","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:advanced_cluster_security:4"]},{"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"apicurio/apicurio-registry-rhel8-operator","defaultStatus":"unknown","cpes":["cpe:/a:redhat:service_registry:2"]},{"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 3","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"apicurio/apicurio-registry-rhel8-operator","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:apicurio_registry:3"]},{"vendor":"Red Hat","product":"Red Hat Fuse 7","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"fuse7/fuse-apicurito-rhel8-operator","defaultStatus":"affected","cpes":["cpe:/a:redhat:jboss_fuse:7"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compliance/openshift-compliance-rhel8-operator","defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/cnf-tests-rhel8","defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/cnf-tests-rhel9","defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/lifecycle-agent-operator-bundle","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/topology-aware-lifecycle-manager-operator-bundle","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ztp-site-generate-rhel8","defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/cluster-network-addons-operator-rhel9","defaultStatus":"affected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat Web Terminal","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"web-terminal/web-terminal-exec-rhel9","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:webterminal:1"]},{"vendor":"Red Hat","product":"Red Hat Web Terminal","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"web-terminal/web-terminal-rhel9-operator","defaultStatus":"unaffected","cpes":["cpe:/a:redhat:webterminal:1"]}],"references":[{"url":"https://access.redhat.com/errata/RHEA-2025:23406","name":"RHEA-2025:23406","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHEA-2025:23478","name":"RHEA-2025:23478","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHEA-2026:0129","name":"RHEA-2026:0129","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19332","name":"RHSA-2025:19332","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19335","name":"RHSA-2025:19335","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19958","name":"RHSA-2025:19958","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19961","name":"RHSA-2025:19961","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21368","name":"RHSA-2025:21368","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21885","name":"RHSA-2025:21885","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22415","name":"RHSA-2025:22415","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22416","name":"RHSA-2025:22416","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22418","name":"RHSA-2025:22418","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22420","name":"RHSA-2025:22420","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22683","name":"RHSA-2025:22683","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22684","name":"RHSA-2025:22684","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23528","name":"RHSA-2025:23528","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23529","name":"RHSA-2025:23529","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23542","name":"RHSA-2025:23542","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0627","name":"RHSA-2026:0627","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0718","name":"RHSA-2026:0718","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0722","name":"RHSA-2026:0722","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0737","name":"RHSA-2026:0737","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2572","name":"RHSA-2026:2572","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5633","name":"RHSA-2026:5633","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-7195","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376300","name":"RHBZ#2376300","tags":["issue-tracking","x_refsource_REDHAT"]}],"datePublic":"2025-08-07T18:59:00.000Z","problemTypes":[{"descriptions":[{"cweId":"CWE-276","description":"Incorrect Default Permissions","lang":"en","type":"CWE"}]}],"x_redhatCweChain":"CWE-276: Incorrect Default Permissions","workarounds":[{"lang":"en","value":"In Red Hat OpenShift Container Platform, the following default configurations reduce the impact of this vulnerability.\n\nSecurity Context Constraints (SCCs): The default SCC, Restricted-v2, applies several crucial security settings to containers. \n\nCapabilities: drop: ALL removes all Linux capabilities, including SETUID and SETGID. This prevents a process from changing its user or group ID, a common step in privilege escalation attacks. The SETUID and SETGID capabilities can also be dropped explicitly if other capabilities are still required.\n\nallowPrivilegeEscalation: false ensures that a process cannot gain more privileges than its parent process. This blocks attempts by a compromised container process to grant itself additional capabilities.\n\nSELinux Mandatory Access Control (MAC): Pods are required to run with a pre-allocated Multi-Category Security (MCS) label. This SELinux feature provides a strong layer of isolation between containers and from the host system. A properly configured SELinux policy can prevent a container escape, even if an attacker gains elevated permissions within the container itself.\n\nFilesystem Hardening: While not a default setting, a common security practice is to set readOnlyRootFilesystem: true in a container's security context. In this specific scenario, this configuration would prevent an attacker from modifying critical files like /etc/passwd, even if they managed to gain file-level write permissions."}],"timeline":[{"lang":"en","time":"2025-07-04T08:54:01.878Z","value":"Reported to Red Hat."},{"lang":"en","time":"2025-08-07T18:59:00.000Z","value":"Made public."}],"credits":[{"lang":"en","value":"Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue."}],"providerMetadata":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-07-21T00:37:15.622Z"},"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-08-07T19:23:11.314765Z","id":"CVE-2025-7195","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-08-07T19:36:47.691Z"}}]}}