[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f73HSnKMw31zLnqPWdPYKp3fj8favLJBP-_E5vxfuNBU":3,"g5a-risk:CVE-2022-4039":163},{"success":4,"data":5,"meta":160},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":73,"references":74,"referencesCount":87,"weaknesses":88,"weaknessesCount":97,"isActivelyExploited":98,"cisaInfo":27,"otxData":27,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":158,"notableEvents":159},"CVE-2022-4039","What is CVE-2022-4039?","A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.","A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw all...","2023-09-22T15:15:09.847","2023-11-07T03:56:46.79",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"53f830b8-0a3f-465b-8143-3b8a9948e749","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK",8,2.1,0.00789,[38,38,38,38,38,38,38],"Critical",[42,47,51,54,57,59,62,64,67,69],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","single_sign-on","7.0","cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"openshift_container_platform","4.9","cpe:2.3:a:redhat:openshift_container_platform:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":52,"criteria":53,"vulnerable":4},"4.10","cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":55,"version":49,"criteria":56,"vulnerable":4},"openshift_container_platform_for_ibm_z","cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":55,"version":52,"criteria":58,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":60,"version":49,"criteria":61,"vulnerable":4},"openshift_container_platform_for_linuxone","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":60,"version":52,"criteria":63,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":65,"version":49,"criteria":66,"vulnerable":4},"openshift_container_platform_for_power","cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":65,"version":52,"criteria":68,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":70,"version":71,"criteria":72,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",10,[75,80,83],{"url":76,"source":77,"tags":78},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:1047","Red Hat",[79],"Vendor Advisory",{"url":81,"source":77,"tags":82},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2022-4039",[79],{"url":84,"source":77,"tags":85},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2143416",[86,79],"Issue Tracking",3,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2022-4039? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-4039, a critical severity cyber security vulnerability from 2023. A flaw was found in Red Hat Single Sign-On for OpenShift...","CVE-2022-4039, CVE-2022-4039 vulnerability, CVE-2022-4039 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, single_sign-on vulnerability, openshift_container_platform vulnerability, openshift_container_platform_for_ibm_z vulnerability, openshift_container_platform_for_linuxone vulnerability, openshift_container_platform_for_power vulnerability","\u002Fwhat-is\u002Fcve-2022-4039",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-4039","Cybersecurity","CVE-2022-4039, CVE-2022-4039 vulnerability, CVE-2022-4039 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126,133],{"Operator":27,"Negate":27,"Nodes":127},[128],{"Operator":129,"Negate":27,"CPEMatch":130},"OR",[131],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890",{"Operator":134,"Negate":27,"Nodes":135},"AND",[136,154],{"Operator":129,"Negate":27,"CPEMatch":137},[138,140,142,144,146,148,150,152],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"81609549-25CE-4C8A-9DE3-170D23704208",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0595C9F8-9C7A-4FC1-B7EE-52978A1B1E93",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"01B0F191-ADDB-4AAE-A5C5-5CC16909E64A",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FD75BCB4-F0E1-4C05-A2D7-001503C805C9",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B02036DD-4489-480B-B7D4-4EB08952377B",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C7E78C55-45B6-4E01-9773-D3468F8EA9C3",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"30E2CF79-2D56-48AB-952E-5DDAFE471073",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"54E24055-813B-4E6D-94B7-FAD5F78B8537",{"Operator":129,"Negate":27,"CPEMatch":155},[156],{"Vulnerable":27,"Criteria":72,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F4CFF558-3C47-480D-A2F0-BABF26042943",[],[],{"lastModified":11,"cacheTime":161,"version":162},1792255710142,"2.0",{"score":164,"band":165,"action":166,"scoredAt":167},54,"Medium","Plan remediation","2026-10-16T06:59:15.308267+00:00"]