[UPDATE] [hoch] Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen

highCVE-2022-3517 CVE-2022-41912

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Advanced Cluster Management ausnutzen, um einen Denial of Service Angriff durchzuführen oder die Authentisierung zu umgehen.

CSIRTS triage

vendor: Red Hat product: Enterprise Linux Advanced Cluster Management Denial of service Authentication bypass

What: Multiple vulnerabilities in Advanced Cluster Management enable remote denial of service attacks and authentication bypass.
Who is affected: Deployments running affected versions of Red Hat Enterprise Linux Advanced Cluster Management.
Urgency: High severity authentication bypass and denial of service vulnerabilities require urgent patching to prevent unauthorized access.
Action: Apply Red Hat security updates addressing CVE-2022-3517 and CVE-2022-41912 to affected Advanced Cluster Management installations.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Enterprise Linux Advanced Cluster Management

Get an email when a new Enterprise Linux Advanced Cluster Management advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-09-04
Exploitation: Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2338

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2022-35171.8% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 77% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2022-419122.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 81% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2022-3517	coverage & exploitation status	NVD · CVE.org
CVE-2022-41912	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

highexploited[UPDATE] [hoch] Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwa…cert-bund
unknownNCSC-2026-0325 [1.00] [M/H] Kwetsbaarheden verholpen in Atlassian productenncsc-nl