Linux-pam: linux-pam directory traversal
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
CVE-2025-6020
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2025-6020
Red Hat Enterprise Linux 10
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 10.0 Extended Update Support
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8
Source reference: /containers/cna/affected/5/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.2 Advanced Update Support
Source reference: /containers/cna/affected/6/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Source reference: /containers/cna/affected/7/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Source reference: /containers/cna/affected/8/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
Source reference: /containers/cna/affected/9/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Source reference: /containers/cna/affected/10/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Source reference: /containers/cna/affected/11/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Source reference: /containers/cna/affected/12/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/13/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/14/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/15/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/16/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Source reference: /containers/cna/affected/17/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Source reference: /containers/cna/affected/18/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9.4 Extended Update Support
Source reference: /containers/cna/affected/19/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Web Terminal 1.11 on RHEL 9
Source reference: /containers/cna/affected/20/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Web Terminal 1.11 on RHEL 9
Source reference: /containers/cna/affected/21/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Web Terminal 1.12 on RHEL 9
Source reference: /containers/cna/affected/22/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/23/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/24/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/25/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/26/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/27/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/28/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/29/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/30/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHEL-8 based Middleware Containers
Source reference: /containers/cna/affected/31/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/32/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/33/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/34/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/35/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/36/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/37/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/38/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/39/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/40/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/41/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RHOSS-1.36-RHEL-8
Source reference: /containers/cna/affected/42/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
cert-manager operator for Red Hat OpenShift 1.16
Source reference: /containers/cna/affected/43/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Compliance Operator 1
Source reference: /containers/cna/affected/44/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Discovery 2
Source reference: /containers/cna/affected/45/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Discovery 2
Source reference: /containers/cna/affected/46/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Insights proxy 1.5
Source reference: /containers/cna/affected/47/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/48/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/49/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/50/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/51/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/52/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/53/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/54/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/55/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift distributed tracing 3.6.0
Source reference: /containers/cna/affected/56/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift sandboxed containers 1.10
Source reference: /containers/cna/affected/57/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift sandboxed containers 1.10
Source reference: /containers/cna/affected/58/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift sandboxed containers 1.10
Source reference: /containers/cna/affected/59/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift sandboxed containers 1.10
Source reference: /containers/cna/affected/60/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.7.1",
"versionType": "semver"
}
],
"packageName": "linux-pam",
"collectionURL": "https://github.com/linux-pam/linux-pam",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"versions": [
{
"status": "unaffected",
"version": "0:1.6.1-8.el10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.6.1-8.el10_0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.1.8-23.el7_9.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-37.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-38.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-8.el8_2.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-14.el8_4.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-16.el8_6.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-16.el8_6.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-16.el8_6.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-26.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-26.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-26.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-25.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-26.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-25.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream",
"cpe:/o:redhat:rhel_e4s:9.0::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-9.el9_0.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-15.el9_2.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream",
"cpe:/o:redhat:rhel_eus:9.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-24.el9_4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Web Terminal 1.11 on RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1.11-19",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "web-terminal/web-terminal-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Web Terminal 1.11 on RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1.11-8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "web-terminal/web-terminal-tooling-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Web Terminal 1.12 on RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1.12-4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "web-terminal/web-terminal-tooling-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752066672",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065732",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-businesscentral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065732",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-controller-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-3.1752065737",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065731",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-kieserver-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-25",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065736",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-process-migration-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-2.1752065733",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065755",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-smartrouter-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-management-console-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-12",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-18",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-7",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1.16::el9"
],
"vendor": "Red Hat",
"product": "cert-manager operator for Red Hat OpenShift 1.16",
"versions": [
{
"status": "unaffected",
"version": "v1.16.5-1760515757",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"vendor": "Red Hat",
"product": "Compliance Operator 1",
"versions": [
{
"status": "unaffected",
"version": "1.8.0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "compliance/openshift-compliance-openscap-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Discovery 2",
"versions": [
{
"status": "unaffected",
"version": "2.0.0-1752592913",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "discovery/discovery-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Discovery 2",
"versions": [
{
"status": "unaffected",
"version": "2.2.1-1758555934",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "discovery/discovery-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Insights proxy 1.5",
"versions": [
{
"status": "unaffected",
"version": "1.5.7-1759331989",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752046452",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-collector-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752046437",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752046439",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-target-allocator-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070865",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-gateway-opa-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070873",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-gateway-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1751993590",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-jaeger-query-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070827",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-query-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070833",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070866",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.10",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757422110",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.10",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757421804",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.10",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757421879",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.10",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757422401",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2025-6020
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #17102 · Revision 1
- Added to Heist Feed
- Publisher date