Get real-time updates on Telegram
CVE-2024-11831: Red Hat Advanced Cluster Security 4.4 (exact versions not specified); +54 more affected products
CVE-2024-11831. CVSS 3.1 base score 5.4 (MEDIUM, Vendor/CNA). EPSS 0.01122 (percentile 0.65115), scored 2026-10-06.
Affected technology
Product not specified by the source · 6.0 to before 6.0.2
Vendor not specified by the source
Red Hat Advanced Cluster Security 4.4 · Exact affected versions not specified by the source
Red Hat
Red Hat Advanced Cluster Security 4.5 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 7.1 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 8.1 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 9.0 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
RHODF-4.14-RHEL-9 · Exact affected versions not specified by the source
Red Hat
RHODF-4.15-RHEL-9 · Exact affected versions not specified by the source
Red Hat
RHODF-4.16-RHEL-9 · Exact affected versions not specified by the source
Red Hat
RHODF-4.17-RHEL-9 · Exact affected versions not specified by the source
Red Hat
RHODF-4.18-RHEL-9 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 8 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Pipelines 1.14.6 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Pipelines 1.15 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Pipelines 1.16 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Pipelines 1.17 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Pipelines 1.18.0 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Pipelines 1.19 · Exact affected versions not specified by the source
Red Hat
Cryostat 3 · Exact affected versions not specified by the source
Red Hat
Logging Subsystem for Red Hat OpenShift · Exact affected versions not specified by the source
Red Hat
Migration Toolkit for Virtualization · Exact affected versions not specified by the source
Red Hat
.NET 6.0 on Red Hat Enterprise Linux · Exact affected versions not specified by the source
Red Hat
OpenShift Lightspeed · Exact affected versions not specified by the source
Red Hat
OpenShift Pipelines · Exact affected versions not specified by the source
Red Hat
OpenShift Serverless · Exact affected versions not specified by the source
Red Hat
OpenShift Service Mesh 2 · Exact affected versions not specified by the source
Red Hat
Red Hat 3scale API Management Platform 2 · Exact affected versions not specified by the source
Red Hat
Red Hat Advanced Cluster Management for Kubernetes 2 · Exact affected versions not specified by the source
Red Hat
Red Hat Advanced Cluster Security 4 · Exact affected versions not specified by the source
Red Hat
Red Hat Ansible Automation Platform 2 · Exact affected versions not specified by the source
Red Hat
Red Hat build of Apache Camel - HawtIO 4 · Exact affected versions not specified by the source
Red Hat
Red Hat build of Apicurio Registry 2 · Exact affected versions not specified by the source
Red Hat
Red Hat build of OptaPlanner 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Data Grid 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Developer Hub · Exact affected versions not specified by the source
Red Hat
Red Hat Discovery 1 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Fuse 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Integration Camel K 1 · Exact affected versions not specified by the source
Red Hat
Red Hat JBoss Enterprise Application Platform 7 · Exact affected versions not specified by the source
Red Hat
Red Hat JBoss Enterprise Application Platform 8 · Exact affected versions not specified by the source
Red Hat
Red Hat JBoss Enterprise Application Platform Expansion Pack · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift AI (RHOAI) · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 3.11 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Dev Spaces · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift distributed tracing 3 · Exact affected versions not specified by the source
Red Hat
Red Hat Process Automation 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Quay 3 · Exact affected versions not specified by the source
Red Hat
Red Hat Satellite 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Single Sign-On 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Trusted Profile Analyzer · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · User interaction required
What an attacker can do
An attacker can inject malicious code. Vendor/CNA’s CVSS 3.1 assessment (base score 5.4/10) rates confidentiality and integrity impact as low; availability impact as none.
- CWE
- CWE-79
- CCR priority
- 21.9 /100 (P4)
- CVSS 3.1
- 5.4 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · Vendor/CNA
- EPSS
- 0.01122 · percentile 0.65197 · 2026-10-08
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-08 17:36:22.845483+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-08 17:32:11.049884+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-11831.html