CVE-2024-3727: OADP-1.3-RHEL-9 (exact versions not specified); +30 more affected products

Affected technology

Product not specified by the source · 0 to before 5.29.3, 5.30.0 to before 5.30.1
Vendor not specified by the source

OADP-1.3-RHEL-9 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Security 4.4 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Security 4.5 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Migration Toolkit for Containers 1.8 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.13 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.14 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.15 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.16 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.17 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.18 · Exact affected versions not specified by the source
Red Hat

RHEL-9-CNV-4.15 · Exact affected versions not specified by the source
Red Hat

Multicluster Engine for Kubernetes · Exact affected versions not specified by the source
Red Hat

OpenShift Developer Tools and Services · Exact affected versions not specified by the source
Red Hat

OpenShift Serverless · Exact affected versions not specified by the source
Red Hat

OpenShift Source-to-Image (S2I) · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Management for Kubernetes 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Advanced Cluster Security 3 · Exact affected versions not specified by the source
Red Hat

Red Hat Ansible Automation Platform 1.2 · Exact affected versions not specified by the source
Red Hat

Red Hat Ansible Automation Platform 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 3.11 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform Assisted Installer 1 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Dev Spaces · Exact affected versions not specified by the source
Red Hat

Red Hat Openshift Sandboxed Containers · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Virtualization 4 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenStack Platform 16.2 · Exact affected versions not specified by the source
Red Hat

Red Hat Quay 3 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 8.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.