CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2024-11831: Red Hat Advanced Cluster Security 4.4 (exact versions not specified); +54 more affected products

CVE-2024-11831. CVSS 3.1 base score 5.4 (MEDIUM, Vendor/CNA). EPSS 0.01122 (percentile 0.65115), scored 2026-10-06.

Affected technology

Product not specified by the source · 6.0 to before 6.0.2
Vendor not specified by the source

Red Hat Advanced Cluster Security 4.4 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Security 4.5 · Exact affected versions not specified by the source
Red Hat

Red Hat Ceph Storage 7.1 · Exact affected versions not specified by the source
Red Hat

Red Hat Ceph Storage 8.1 · Exact affected versions not specified by the source
Red Hat

Red Hat Ceph Storage 9.0 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

RHODF-4.14-RHEL-9 · Exact affected versions not specified by the source
Red Hat

RHODF-4.15-RHEL-9 · Exact affected versions not specified by the source
Red Hat

RHODF-4.16-RHEL-9 · Exact affected versions not specified by the source
Red Hat

RHODF-4.17-RHEL-9 · Exact affected versions not specified by the source
Red Hat

RHODF-4.18-RHEL-9 · Exact affected versions not specified by the source
Red Hat

Red Hat Ceph Storage 8 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Pipelines 1.14.6 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Pipelines 1.15 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Pipelines 1.16 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Pipelines 1.17 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Pipelines 1.18.0 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Pipelines 1.19 · Exact affected versions not specified by the source
Red Hat

Cryostat 3 · Exact affected versions not specified by the source
Red Hat

Logging Subsystem for Red Hat OpenShift · Exact affected versions not specified by the source
Red Hat

Migration Toolkit for Virtualization · Exact affected versions not specified by the source
Red Hat

.NET 6.0 on Red Hat Enterprise Linux · Exact affected versions not specified by the source
Red Hat

OpenShift Lightspeed · Exact affected versions not specified by the source
Red Hat

OpenShift Pipelines · Exact affected versions not specified by the source
Red Hat

OpenShift Serverless · Exact affected versions not specified by the source
Red Hat

OpenShift Service Mesh 2 · Exact affected versions not specified by the source
Red Hat

Red Hat 3scale API Management Platform 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Security 4 · Exact affected versions not specified by the source
Red Hat

Red Hat Ansible Automation Platform 2 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel - HawtIO 4 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apicurio Registry 2 · Exact affected versions not specified by the source
Red Hat

Red Hat build of OptaPlanner 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Ceph Storage 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Ceph Storage 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Data Grid 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Developer Hub · Exact affected versions not specified by the source
Red Hat

Red Hat Discovery 1 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Fuse 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Integration Camel K 1 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform Expansion Pack · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift AI (RHOAI) · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 3.11 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Dev Spaces · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift distributed tracing 3 · Exact affected versions not specified by the source
Red Hat

Red Hat Process Automation 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Quay 3 · Exact affected versions not specified by the source
Red Hat

Red Hat Satellite 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Single Sign-On 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Trusted Profile Analyzer · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · User interaction required

What an attacker can do

An attacker can inject malicious code. Vendor/CNA’s CVSS 3.1 assessment (base score 5.4/10) rates confidentiality and integrity impact as low; availability impact as none.

Published

CWE
CWE-79
CCR priority
21.9 /100 (P4)
CVSS 3.1
5.4 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · Vendor/CNA
EPSS
0.01122 · percentile 0.65197 · 2026-10-08
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-11831.html