CVE-2022-0155

18

FAUCET Score

CVE-2022-0155 describes an Exposure of Private Personal Information vulnerability within the 'follow-redirects' library, affecting various projects including 'follow-redirects_project follow-redirects' and Siemens products utilizing 'sinec_ins'. With a CVSS score of 6.5 (Medium), this vulnerability can be exploited over the network with low attack complexity, requiring user interaction, and potentially leading to high confidentiality impact without affecting integrity or availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 1.14.7CPE matchmatch criteria	cpe:2.3:a:follow-redirects_project:follow-redirects::::::node.js::*
		< 1.0CPE matchmatch criteria	cpe:2.3:a:siemens:sinec_ins::::::::
		1.0CPE matchmatch criteria	cpe:2.3:a:siemens:sinec_ins:1.0:-::::::
		1.0CPE matchmatch criteria	cpe:2.3:a:siemens:sinec_ins:1.0:sp1::::::

CVSS Data

CVSS version used by this source: 3.0

8.0HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.1

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

2.43%

Probability of exploitation in next 30 days

EPSS Percentile

82.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0243 is in the 92nd percentile among its peer group of 26,234 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (149)

github_advisorypatch availablevia nvd_reference

npmpatch availablevia ghsa

Product: follow-redirectsFixed in: 1.14.7

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-multicluster-console-rhel9:sha256:3a95ef7bd1e7bdde31957c1d6121c1ef4d0678e3f751ae0177f321c11f39679f

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-console-rhel9:sha256:0995be98994fc88f092a7e3f9fdf3efe01ded631eae774098d5e883c9250c388

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:07782228ecd290f740e9db29bb809e33091e9377307100634319ba5ab814962c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:b7e21acb1b51d50e88d92907a82632ba4955aa0a7e8749537cdad88b92513c8c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:43558293aaad9fd082778dfc1f51e0ce0f7bb8dc2e350cfc58bcabc0c5ab3b62

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-external-snapshotter-rhel9-operator:sha256:0a4e554c16fe5ffe1ac3c08ec619c05b7016394d6ecbc03923807405e3c3db73

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-external-snapshotter-sidecar-rhel9:sha256:b4fadb27268d42d3ba75d73836a2d08bc86466237e13c2cc01f371d185228fcb

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-multicluster-console-rhel9:sha256:befe5845eef5b13e652c9ce8541f29e4d8ef2009ff527f1fd80f2495d4b0c8b1

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:1708970ee005a9ebd97c0eb9ce6cce2d9b9a5b8333bf26019d4c7abcbd897ffb

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-must-gather-rhel9:sha256:08845870b2ba26e237a7aee6c54d6689d40512eabc37ce7d11b35a7be15743b1

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-rhel9-operator:sha256:fb8c5faf2e866c02d0cb11e71430d95fe3ceab5f15ff2a82be2ee86d0a57de3c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odr-rhel9-operator:sha256:c3b69f08c0ca813e311eb84d562dcefa9a6651e605b250c46e6bb70ac93f698a

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/rook-ceph-rhel9-operator:sha256:28853c9db8d0a54d42c7f4fcaa591a80dd3e5273d8e463d3496fbe334f9f9721

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization Engine 4.4Fixed in: ovirt-web-ui-0:1.9.2-1.el8ev

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/cephcsi-rhel9:sha256:b4568ee6f890f98c1ac67b7115931a0f16bb1d69f3863ce554efddf64ce7b765

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/mcg-cli-rhel9:sha256:13b0299a3e045cc02e6d864398e3676b1dc038504fab8993a92b8b8fdff252c6

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/mcg-core-rhel9:sha256:152c336c76cc69fc11cd6d3957c781c8d1c733a3cbead2448efd202b35d034e2

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/mcg-rhel9-operator:sha256:dcad74db55ead7c9c264415d467b08527d3beaf1b079a28ee7108c032a94ea80

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-client-console-rhel9:sha256:e529edb5b01923fc4c44fc8b999ca05719365c2e9ea13e579ecd29e4b4c7e02b

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-client-rhel9-operator:sha256:846f481d6d57e4306f4c53d9ae90c6e9e6d0af1006b7f999c4bc392b25b0183d

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:d3850e64b6707d4fa8c87efd652e4b06ee122c58fe43040b371295626f7d3784

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-rhel9-operator:sha256:a73d74c5aad19c476d2f6be7bde6763675d68342021e9654dffe4303cf8d2a2c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-console-rhel9:sha256:10de7f45e7adf11c48fd3311bfdf50c80af2c15b36d54d2565e9115dbe74747b

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:d48c4170807496eea6ebd3c101b3ebfdc6230fec6ede62c04235fb0acdc06a53

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:0282d53fe18c9f427fc9af81fe64ceecd84cc4aee60878b0a0dfec76f3c6b2a9

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:07fade8638107be11d2eb1fe76cd0e051627d85a28aa00e677e82764d94b9bee

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-multicluster-console-rhel9:sha256:d10840f73008b75bd8550baa67ce453e27ae44bfdb4515fe53752078d460edfb

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:0fda299fc4af5af2365f1bc7b2155e6a109196218443a03e65eb1b117cbdeeae

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-must-gather-rhel9:sha256:babfb7fa894d83f591bd3bb17621a440bd9e6e001e4530a01de65bb36fc025b5

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-rhel9-operator:sha256:c790126755b9d5f81438217a6856ca43157ea08a2d53e106f130501ebc51c893

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odr-rhel9-operator:sha256:4f9c2643f80a37b042a4ffdc1bd68e06a18b9077daec7d4b4cb566adee26ba03

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/rook-ceph-rhel9-operator:sha256:1587bf92b7369eaefbf2828c324ceb585b3591c397fd1ecd59804875ab7cf64f

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/cephcsi-rhel9:sha256:78175febe7b181ade5054857d20b097797663c72cb17cbae4203958e8a351329

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/mcg-core-rhel9:sha256:8ed89037982928b39705d3554f51012c537bef9994e2895511a8a356d735fb2a

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/mcg-rhel9-operator:sha256:8b739d8102a7af6efbf3435d44efd5d00798782109c106d91aeef9f5d766db2b

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-client-console-rhel9:sha256:d53c5343851957d291397d11fb14f4b52a1b0e5dbd9a305a3eaf66c45e9b6228

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-client-rhel9-operator:sha256:dba72b4adc377084e2fe0ea84c2849fb3101e5d3bb9bc3ee261df6391bd10da2

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:d79168a44c5789d77d249f5ec981d36345cfbd834ee6cef2de0eb8d90e8bf308

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-rhel9-operator:sha256:2afaf7feceda2596f257888a5cc5dd19293252da973d4988e00a21c50aa601c4

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-cli-rhel9:sha256:7b82430d91bd92f7103b73f39e1eeee300b036cf2dcd24bba4d8a6c73585636e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-console-rhel9:sha256:02e2e6d8f4037d66a951af24d72a02cb1e41bce6a5c1f184fc6797c49f60fc75

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:ead76cf0baeff4665c19b47e451f4f73c7ec4a286fe5b0eddf6f2256af5195cc

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:2a3861eeb69808eea9cd1848e770a9f3b6e65ef44c8add47675a51e4d35edbfe

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:0c5becf0a62d24cb986b0338432e30fa1952487392d3712d190c85f35300cd97

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-multicluster-console-rhel9:sha256:896c0fef09071c686fdebff7afe1133e06fca18271525367df08491fb49c5490

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/mcg-core-rhel9:sha256:b0d4c9692b9c2ea9ffa0af5bfe5fa3d9a7f2804702a5c41e4134cc1e67dad9ea

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:6e62b04f43e61a08cebddd4155ad7240a876ce96c4f2f950556559bfc99e8c78

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-must-gather-rhel9:sha256:0cef2dc6c500024d272d85c04ce671648c41d25ed00b4b1c40f9a5cc7c9aa24d

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-rhel9-operator:sha256:d54d519628f72c580e4a5a91e9206ff32d94cd4b34100d92f4e866f537e0b7e9

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odr-rhel9-operator:sha256:cc6996d1f74c05e15f829b5ee7c230e6c1969ee17f9ce653ca5aa9fa8e8e2fcc

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/rook-ceph-rhel9-operator:sha256:f4a5e16ed21a930a510b5f695a645be2cb6bff1487f5865650fe3c0759e25689

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/cephcsi-rhel9:sha256:88ee659ec3dee8762aef89123cab66c71e58cf473af2b1f3c9abfff65d645c50

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/mcg-core-rhel9:sha256:fec08e03cd803c02de22286b1cd985751d39cad6ea355275d3d9970af080815e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/mcg-rhel9-operator:sha256:63d7343bc58a15c3100d40a7db1c12684466f0c229b383ffa66f762578bd1c17

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-client-console-rhel9:sha256:2540e7b1d58f9222954796992c82b03706c32b03eb76973a203e9dd6a9fd1614

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-client-rhel9-operator:sha256:12de253d776c8a2b72966403179650aeee0ea3a4100be45a93b240fcf23ccc17

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:be114324106bac45e644e8a4c13dad7699e8808fcaf7da535fe9e7cdc06f1796

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-rhel9-operator:sha256:81406e5a67aa735204cbb02891f9074ce834e13d9c0225d2ee679dd49e3f3d73

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-cli-rhel9:sha256:b4b85e7dcb3fd751c6a8efe6fe43bf5b588850c1e8586f41fffe4f396c2dba54

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-console-rhel9:sha256:51e41acedaa776080b4f8a297d13d4f609839b834d929f4312a2c70afdb68329

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:0569ea1b4783e21b056242d9f2a40a548ff560a5ab957245444cc3770ed664db

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:f161ffffe44352edd8e61629106daf837f8c3b6b84b61c1b9fc94892f2b253b7

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:befb8628ba9619d150958d10500a775dee304a87e7bd2dca62f43a9eb19f44ab

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-multicluster-console-rhel9:sha256:cd9a58d3ac10d7ac072ad056ff897565308e798cd0bb8ce50248924fa6f904c5

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:4af5cbf6944b170e3578f0e904a57acbdef4ce27b7dbd9629b2a4d7c0231330d

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-must-gather-rhel9:sha256:0d7aed32d3447e3a3571b82f45a190221f48e224e70dcbb8ebc97b0172ca8544

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-rhel9-operator:sha256:a8c51e193d55d14f9ea4a897047478dfe63fec2b07de4306459fe92805063f8b

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odr-rhel9-operator:sha256:e7a14646b06cc234948536dccd1741c0a07124923e0195a403bec100c5d796d9

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/rook-ceph-rhel9-operator:sha256:e41fd9fa782d7cab0186bcd73cf9b0914710be12bf4ba191f4d02c5feb891902

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/cephcsi-rhel9:sha256:fa22abd3771012d249add9357a05ac7adb6d41783f09fb0920cbc340a3134739

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/cephcsi-rhel9-operator:sha256:12bd5b3aec0dbd7bd29e10956eae9986ab95591918e4331ef495ba9480e13338

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/mcg-rhel9-operator:sha256:57597555a31a799fec3dfbdc43949a8b3b1fb9bc02ef8a7990982335ee94f71d

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-client-console-rhel9:sha256:166573d2a6d90fe041bccb6ccb867e487131fce54ddf6e52bfaf79859bcd9cb7

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-client-rhel9-operator:sha256:5a98709f9dd4228af8d0426d3afaacbf4fdbb22afcc013187a03612a2fd0cd96

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:e661ba3760dbd154ca7fcac8ceb39a50403664e712f43a93c4732b7e078de7aa

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-rhel9-operator:sha256:e42ee66ee537d9f11b2e0d8bccf6bd35208b222bb586b9b2a08cfd37750cfa60

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-cli-rhel9:sha256:2ae09b1671803f36a1ce7c90ccc99bb673d6779d3e2f663961ab9c4491473635

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-console-rhel9:sha256:0c3219a8065376f68178b94273c691afa37d5b2ab49f26e1f8167624a1487965

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:1feecf8d8b8d2cbc52990a41805d80b8681763b1e3f8302b2d1e210582b8f6cf

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:61ecd4e7a8b3074bb25090e0453f523677ac9db486b26acd5624e47dfeea977c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:669165177d141cb98eca76958fb3a612c309d47430a0388211338b93e551210e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-multicluster-console-rhel9:sha256:ce4d79d310a644286872f9026bab2fe0725b4fc9baf230b407bc5eb5326c8136

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:adb7d9f0c0b064f4525eb2d78c3f233ccfcb0fcc0fe90e4fc284c1db54e547a4

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-must-gather-rhel9:sha256:5422a10cc5915dd45be9afe8088026dc9335430abff93c68445c12624072222a

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-rhel9-operator:sha256:e35ebfe16a9f5696dad58a2c1dc0d081125cf822a293c6bfdbebe4423e79438f

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odr-rhel9-operator:sha256:9ce5157811f6d08cd803b1daad2b4d30cb1bf334a044b4676186321c322957f9

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/rook-ceph-rhel9-operator:sha256:f0475eb47712991a30abb4ae9af9bec4849f4b04a2c5edae9586f570c78aaff6

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/cephcsi-rhel9:sha256:1690d6c99f4626289bcdd78c8521edffb61c91da1a45aa2eb2b6ab2af137b7c1

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/cephcsi-rhel9-operator:sha256:f4615211c16cc89f94043e2588400957b8fd225f233c86096542ac1364678cf4

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/mcg-core-rhel9:sha256:c8dce4a25f10645edc649576e995b2b6619c8bc39c2c30d3cffbe3a3c3a86b35

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/mcg-rhel9-operator:sha256:852442ee591c566acde876d1101b89f6009f186f6f705bb128754b2ed0043d46

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-client-console-rhel9:sha256:e9f1e2743fe9930ccb470c6eb8d9e9577640fe6a9ab7a013648e513b6216fa74

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-client-rhel9-operator:sha256:526abc72ccfa1729a5962911f92da64a3dda4a689421ecdb21c7ad2a049f53ef

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:d40189f09ff39240e5e49412c1314d9911fcb957459c7496b215da8c9f758b8e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-rhel9-operator:sha256:d2cc16ec9cc1f40da3b1967bc9a7b208062c5bc4a2753213ae2c41c62c5115aa

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-cli-rhel9:sha256:0a5ac166f5ebddae21dcf2ce8a5932494209533ac4a92ff5551a402291f27ff9

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-console-rhel9:sha256:b14c3a7c4cc6531ed0d9701fe1b07ddc8c85e702ef8b058f0eaaadb1e8852a04

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:20c7a4f70f6000f204a3c53c153aaa3c08be94c98c09b90f538b2a19156a00e0

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:b2fbb75c7054d13ff54575b398d6d70b5f0348c9777fcb88611b95c0dc18db4e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:95172347459900115fd67d22daa025b8545a9ee9ec05d1098f9196710c720d76

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-multicluster-console-rhel9:sha256:7c5b233911109f0a218b634d8d317229a3949b2ea5936b7ec91ebfcdd6f15060

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:053ad72159390ad37825015b051252dc162f46ebeeab4866e1568af1f0084cab

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-must-gather-rhel9:sha256:ca0284c10827905e1576ea0a01bb09425acbf96d30b2e556b34e22e2d0115196

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-rhel9-operator:sha256:65c4003dfb7180e015ec74fe9e599bcc313501ab9b9c67d61fc59a68e6c89349

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odr-rhel9-operator:sha256:2987990bc63fa58ced038084921bdf168a017bd0b94b296a7c79dc264388339a

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/rook-ceph-rhel9-operator:sha256:f0fc8196ffce6f355f06c0157a38e36109eaa9be1f3e91ad71fdd72bc33ee509

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/cephcsi-rhel9:sha256:bb793e7d18e2ee05b806f00b446be89214c4cb3fe9dfca60b4dbe3d48799d4d6

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/cephcsi-rhel9-operator:sha256:7c681bce8c5042f259358ea684b9bd48a0df2cdea24bee9538dc88acd74ecc80

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/mcg-core-rhel9:sha256:6a99a970a27acd21c51e7ce90af4e85e97650ffbc6256cea5f79a4a31668533a

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/mcg-rhel9-operator:sha256:394a36e01902854f9b131182e16de4d336176cffcf4986b070b9a7aacf14f04e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-client-console-rhel9:sha256:d4d3a189d94f382b27f70f289e96247ca4a6a6584d91120f031e63e6b6f92e97

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-client-rhel9-operator:sha256:a2f84aa279abe89c5d2a519cb57cd2c9f3bc5ba216fad8aff1c24494128ac5db

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:65afd710ee59560b1d4fa38c76cb75d66739958e34c1c1620f83effe517c4910

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-rhel9-operator:sha256:72fb540792e27b6d81dc782a12483dde9c726d0298f6a879dc9d4c6ea04c6c51

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cli-rhel9:sha256:b47af6a5fdbb611237e21c6d834d9ea5a1e0199d1a8aab742daafeedcd355960

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cloudnative-pg-rhel9-operator:sha256:7dc1698e696f90de5c6a650e86f6f713c2f5d10a5a752516073ed37b64286468

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-console-rhel9:sha256:78c78cc8462ff77032b9ff174a933da2c6c1b40ac9ae1e4452cfb144df8823f2

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:36fef1c47ecf08729c1aba7244c2d796d623a53d4dcac843e6b048d49332868d

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:b63b6f7351bcd249a28b50211ffe67ee879c9ce3420561881b05d559ee3beddb

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:b783ac33828646c3df2721e66778e8da6cd606e567674ce630acc9a7f4fa0c0f

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:f786a59d0da2fd3f6e83923863e2be32992d23bb6caf856b733d293710fa1440

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-must-gather-rhel9:sha256:aee192e7489498525f7534871fa312cf4dd814156490151d39e336feefa8ddbc

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-rhel9-operator:sha256:900e8b94a4d50675bfc2a53405f7c7ea678932a2991b206ecc28120a9cfc3225

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odr-rhel9-operator:sha256:7bd1a94a976da8b2f9dc5a129fe9aa1c1ff6a18a430c71404f6dbf9cde3860b8

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/rook-ceph-rhel9-operator:sha256:cb154376361744efe00a2dcf51b859d1580f84f33d9a6e0ed3c0dbbe7812a3ce

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/cephcsi-rhel9:sha256:c13ea9701e94e626de8bdfe3cc9873f89fd88d8203d95de252955ce0246deb1c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/cephcsi-rhel9-operator:sha256:e0ddfa4a25cac7836fceb0d2b682534e0be06f92aaeaf46a65b2b30faedf383c

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/mcg-core-rhel9:sha256:7bbfb6add95ec966fa0fae6673e7529dab92551726e9a26e3771ce3786ea1aa3

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/mcg-rhel9-operator:sha256:9d92d47dc70edaec0317b27b437db7a9a6a22703943c909d08431f702865ef4e

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-client-console-rhel9:sha256:73b5c82d9e3b075329c8447404bcd53d1eb6b8fc240218c4b7fd0a32b3ba9fdc

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-client-rhel9-operator:sha256:64ee4a768d5162df9a2817d2c7124ed1a273d2cc3291aec1b3c167b9b764af87

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:f0c2d2f7ce2827d964a74db28708627a1336d353bba9d0a73a8337d0e6feb931

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-rhel9-operator:sha256:20521dc7e08a973be0e9932fbe28557a00cac4e8ff273765df73d4cfede9aaef

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-cli-rhel9:sha256:58fc4b8a0f1d84f86547b13136c96a0f7bbb985161dee73702ed91da6a965693

redhatpatch availablevia redhat_api

Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-cloudnative-pg-rhel9-operator:sha256:b31a37b81859a431afe86d288ecc72f671e62b6aa1ce1f5f0cf2bed982b2b0dd

ubuntupatch availablevia ubuntu_usn

Product: node-follow-redirects (bionic)Fixed in: 1.2.4-1ubuntu0.18.04.1~esm1

ubuntupatch availablevia ubuntu_usn

Product: node-follow-redirects (focal)Fixed in: 1.2.4-1ubuntu0.20.04.1~esm1

ubuntupatch availablevia ubuntu_usn

Product: node-follow-redirects (jammy)Fixed in: 1.14.9+~1.14.1-1ubuntu0.1~esm1

redhatno patchvia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/kui-web-terminal-rhel8

redhatno patchvia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/search-ui-rhel8

redhatno patchvia redhat_api

Product: Red Hat Advanced Cluster Security 3Fixed in: follow-redirects

redhatno patchvia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/application-ui-rhel8

redhatno patchvia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/console-rhel8

redhatno patchvia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/grc-ui-rhel8

redhatno patchvia redhat_api

Product: OpenShift Service Mesh 2.0Fixed in: npm-follow-redirects

redhatend of lifevia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/console-header-rhel8

redhatend of lifevia redhat_api

Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/mcm-topology-rhel8

Vendor Advisories (3)

ubuntuUSN-8217-1

follow-redirects vulnerabilities

npmGHSA-74fj-2j2h-c42qhigh

Exposure of sensitive information in follow-redirects

redhatCVE-2022-0155Moderate

follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor

References

cert-portal.siemens.com / productcert/pdf/ssa-637483.pdf

PatchThird Party Advisory

github.com / follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22

PatchThird Party Advisory

huntr.dev / bounties/fc524e4b-ebb6-427d-ab67-a64181020406

ExploitPatchThird Party Advisory