hawtio-operator
by Red Hat
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-78234 | Cri | 0.64 | 9.9 | 0.00 | Sep 8, 2026 | A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates with a Subject Common Name (CN) supplied by the author of a namespaced Hawtio custom resource.… | ||
| CVE-2026-81320 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2026 | A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object — including the TLS private key in PEM format — is serialized to JSON and written to the operator's standard… | ||
| CVE-2026-80219 | 0.00 | — | 0.00 | Sep 8, 2026 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. |
- risk 0.64cvss 9.9epss 0.00
A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates with a Subject Common Name (CN) supplied by the author of a namespaced Hawtio custom resource.…
- risk 0.36cvss 5.5epss 0.00
A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object — including the TLS private key in PEM format — is serialized to JSON and written to the operator's standard…
- CVE-2026-80219Sep 8, 2026risk 0.00cvss —epss 0.00
Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.