{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "URL Redirection to Untrusted Site", "tracking": { "current_release_date": "2026-08-11T14:59:22+00:00", "generator": { "date": "2026-08-11T14:59:22+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-3664", "initial_release_date": "2021-07-06T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T14:59:22+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat OpenShift GitOps 1.11.0", "product": { "name": "Red Hat OpenShift GitOps 1.11.0", "product_id": "gitops-1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_gitops:1" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.19", "product": { "name": "OpenShift Container Platform 4.19", "product_id": "openshift-4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } }, { "category": "product_name", "name": "OpenShift Service Mesh OSSM 2.0.0", "product": { "name": "OpenShift Service Mesh OSSM 2.0.0", "product_id": "ossm-2.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_mesh:2.0" } } }, { "category": "product_name", "name": "Red Hat Quay v3.6.0", "product": { "name": "Red Hat Quay v3.6.0", "product_id": "quay-3.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.11" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.12" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.13" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.14" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.15" } } }, { "category": "product_version", "name": "openshift-gitops-1/argocd-rhel8", "product": { "name": "openshift-gitops-1/argocd-rhel8", "product_id": "openshift-gitops-1/argocd-rhel8", "product_identification_helper": { "purl": "pkg:oci/argocd-rhel8?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8" } } }, { "category": "product_version", "name": "openshift4/ose-grafana", "product": { "name": "openshift4/ose-grafana", "product_id": "openshift4/ose-grafana", "product_identification_helper": { "purl": "pkg:oci/ose-grafana?repository_url=registry.redhat.io/openshift4/ose-grafana" } } }, { "category": "product_version", "name": "openshift4/ose-prometheus-rhel9", "product": { "name": "openshift4/ose-prometheus-rhel9", "product_id": "openshift4/ose-prometheus-rhel9", "product_identification_helper": { "purl": "pkg:oci/ose-prometheus-rhel9?repository_url=registry.redhat.io/openshift4/ose-prometheus-rhel9" } } }, { "category": "product_version", "name": "openshift4/ose-thanos-rhel9", "product": { "name": "openshift4/ose-thanos-rhel9", "product_id": "openshift4/ose-thanos-rhel9", "product_identification_helper": { "purl": "pkg:oci/ose-thanos-rhel9?repository_url=registry.redhat.io/openshift4/ose-thanos-rhel9" } } }, { "category": "product_version", "name": "quay/quay-rhel8", "product": { "name": "quay/quay-rhel8", "product_id": "quay/quay-rhel8", "product_identification_helper": { "purl": "pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8" } } }, { "category": "product_version", "name": "rhacm2/application-ui-rhel8", "product": { "name": "rhacm2/application-ui-rhel8", "product_id": "rhacm2/application-ui-rhel8", "product_identification_helper": { "purl": "pkg:oci/application-ui-rhel8?repository_url=registry.redhat.io/rhacm2/application-ui-rhel8" } } }, { "category": "product_version", "name": "rhacm2/console-rhel8", "product": { "name": "rhacm2/console-rhel8", "product_id": "rhacm2/console-rhel8", "product_identification_helper": { "purl": "pkg:oci/console-rhel8?repository_url=registry.redhat.io/rhacm2/console-rhel8" } } }, { "category": "product_version", "name": "rhacm2/console-ui-rhel8", "product": { "name": "rhacm2/console-ui-rhel8", "product_id": "rhacm2/console-ui-rhel8", "product_identification_helper": { "purl": "pkg:oci/console-ui-rhel8?repository_url=registry.redhat.io/rhacm2/console-ui-rhel8" } } }, { "category": "product_version", "name": "rhacm2/grc-ui-api-rhel8", "product": { "name": "rhacm2/grc-ui-api-rhel8", "product_id": "rhacm2/grc-ui-api-rhel8", "product_identification_helper": { "purl": "pkg:oci/grc-ui-api-rhel8?repository_url=registry.redhat.io/rhacm2/grc-ui-api-rhel8" } } }, { "category": "product_version", "name": "rhacm2/grc-ui-rhel8", "product": { "name": "rhacm2/grc-ui-rhel8", "product_id": "rhacm2/grc-ui-rhel8", "product_identification_helper": { "purl": "pkg:oci/grc-ui-rhel8?repository_url=registry.redhat.io/rhacm2/grc-ui-rhel8" } } }, { "category": "product_version", "name": "rhacm2/kui-web-terminal-rhel8", "product": { "name": "rhacm2/kui-web-terminal-rhel8", "product_id": "rhacm2/kui-web-terminal-rhel8", "product_identification_helper": { "purl": "pkg:oci/kui-web-terminal-rhel8?repository_url=registry.redhat.io/rhacm2/kui-web-terminal-rhel8" } } }, { "category": "product_version", "name": "rhacm2/mcm-topology-api-rhel8", "product": { "name": "rhacm2/mcm-topology-api-rhel8", "product_id": "rhacm2/mcm-topology-api-rhel8", "product_identification_helper": { "purl": "pkg:oci/mcm-topology-api-rhel8?repository_url=registry.redhat.io/rhacm2/mcm-topology-api-rhel8" } } }, { "category": "product_version", "name": "rhacm2/search-api-rhel8", "product": { "name": "rhacm2/search-api-rhel8", "product_id": "rhacm2/search-api-rhel8", "product_identification_helper": { "purl": "pkg:oci/search-api-rhel8?repository_url=registry.redhat.io/rhacm2/search-api-rhel8" } } }, { "category": "product_version", "name": "rhacm2/search-ui-rhel8", "product": { "name": "rhacm2/search-ui-rhel8", "product_id": "rhacm2/search-ui-rhel8", "product_identification_helper": { "purl": "pkg:oci/search-ui-rhel8?repository_url=registry.redhat.io/rhacm2/search-ui-rhel8" } } }, { "category": "product_version", "name": "servicemesh-grafana", "product": { "name": "servicemesh-grafana", "product_id": "servicemesh-grafana", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-grafana" } } }, { "category": "product_version", "name": "servicemesh-grafana-prometheus", "product": { "name": "servicemesh-grafana-prometheus", "product_id": "servicemesh-grafana-prometheus", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-grafana-prometheus" } } }, { "category": "product_version", "name": "servicemesh-grafana", "product": { "name": "servicemesh-grafana", "product_id": "servicemesh-grafana.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-grafana?arch=src" } } }, { "category": "product_version", "name": "servicemesh-prometheus", "product": { "name": "servicemesh-prometheus", "product_id": "servicemesh-prometheus", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-prometheus" } } }, { "category": "product_version", "name": "servicemesh-prometheus", "product": { "name": "servicemesh-prometheus", "product_id": "servicemesh-prometheus.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-prometheus?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift-gitops-1/argocd-rhel8 as a component of Red Hat OpenShift GitOps 1.11.0", "product_id": "gitops-1:openshift-gitops-1/argocd-rhel8" }, "product_reference": "openshift-gitops-1/argocd-rhel8", "relates_to_product_reference": "gitops-1" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-grafana as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:openshift4/ose-grafana" }, "product_reference": "openshift4/ose-grafana", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-prometheus-rhel9 as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:openshift4/ose-prometheus-rhel9" }, "product_reference": "openshift4/ose-prometheus-rhel9", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-thanos-rhel9 as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:openshift4/ose-thanos-rhel9" }, "product_reference": "openshift4/ose-thanos-rhel9", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-rhel8 as a component of Red Hat Quay v3.6.0", "product_id": "quay-3.6:quay/quay-rhel8" }, "product_reference": "quay/quay-rhel8", "relates_to_product_reference": "quay-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/application-ui-rhel8" }, "product_reference": "rhacm2/application-ui-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/application-ui-rhel8" }, "product_reference": "rhacm2/application-ui-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/application-ui-rhel8" }, "product_reference": "rhacm2/application-ui-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/application-ui-rhel8" }, "product_reference": "rhacm2/application-ui-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/application-ui-rhel8" }, "product_reference": "rhacm2/application-ui-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/console-rhel8" }, "product_reference": "rhacm2/console-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/console-rhel8" }, "product_reference": "rhacm2/console-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/console-rhel8" }, "product_reference": "rhacm2/console-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/console-rhel8" }, "product_reference": "rhacm2/console-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/console-rhel8" }, "product_reference": "rhacm2/console-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/console-ui-rhel8" }, "product_reference": "rhacm2/console-ui-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/console-ui-rhel8" }, "product_reference": "rhacm2/console-ui-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/console-ui-rhel8" }, "product_reference": "rhacm2/console-ui-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/console-ui-rhel8" }, "product_reference": "rhacm2/console-ui-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/console-ui-rhel8" }, "product_reference": "rhacm2/console-ui-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/grc-ui-api-rhel8" }, "product_reference": "rhacm2/grc-ui-api-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/grc-ui-api-rhel8" }, "product_reference": "rhacm2/grc-ui-api-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/grc-ui-api-rhel8" }, "product_reference": "rhacm2/grc-ui-api-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/grc-ui-api-rhel8" }, "product_reference": "rhacm2/grc-ui-api-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/grc-ui-api-rhel8" }, "product_reference": "rhacm2/grc-ui-api-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/grc-ui-rhel8" }, "product_reference": "rhacm2/grc-ui-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/grc-ui-rhel8" }, "product_reference": "rhacm2/grc-ui-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/grc-ui-rhel8" }, "product_reference": "rhacm2/grc-ui-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/grc-ui-rhel8" }, "product_reference": "rhacm2/grc-ui-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/grc-ui-rhel8" }, "product_reference": "rhacm2/grc-ui-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/kui-web-terminal-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/kui-web-terminal-rhel8" }, "product_reference": "rhacm2/kui-web-terminal-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/kui-web-terminal-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/kui-web-terminal-rhel8" }, "product_reference": "rhacm2/kui-web-terminal-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/kui-web-terminal-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/kui-web-terminal-rhel8" }, "product_reference": "rhacm2/kui-web-terminal-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/kui-web-terminal-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/kui-web-terminal-rhel8" }, "product_reference": "rhacm2/kui-web-terminal-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/kui-web-terminal-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/kui-web-terminal-rhel8" }, "product_reference": "rhacm2/kui-web-terminal-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/mcm-topology-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/mcm-topology-api-rhel8" }, "product_reference": "rhacm2/mcm-topology-api-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/mcm-topology-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/mcm-topology-api-rhel8" }, "product_reference": "rhacm2/mcm-topology-api-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/mcm-topology-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/mcm-topology-api-rhel8" }, "product_reference": "rhacm2/mcm-topology-api-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/mcm-topology-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/mcm-topology-api-rhel8" }, "product_reference": "rhacm2/mcm-topology-api-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/mcm-topology-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/mcm-topology-api-rhel8" }, "product_reference": "rhacm2/mcm-topology-api-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/search-api-rhel8" }, "product_reference": "rhacm2/search-api-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/search-api-rhel8" }, "product_reference": "rhacm2/search-api-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/search-api-rhel8" }, "product_reference": "rhacm2/search-api-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/search-api-rhel8" }, "product_reference": "rhacm2/search-api-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/search-api-rhel8" }, "product_reference": "rhacm2/search-api-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:rhacm2/search-ui-rhel8" }, "product_reference": "rhacm2/search-ui-rhel8", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:rhacm2/search-ui-rhel8" }, "product_reference": "rhacm2/search-ui-rhel8", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:rhacm2/search-ui-rhel8" }, "product_reference": "rhacm2/search-ui-rhel8", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:rhacm2/search-ui-rhel8" }, "product_reference": "rhacm2/search-ui-rhel8", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:rhacm2/search-ui-rhel8" }, "product_reference": "rhacm2/search-ui-rhel8", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-grafana as a component of OpenShift Service Mesh OSSM 2.0.0", "product_id": "ossm-2.0:servicemesh-grafana" }, "product_reference": "servicemesh-grafana", "relates_to_product_reference": "ossm-2.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-grafana-prometheus as a component of OpenShift Service Mesh OSSM 2.0.0", "product_id": "ossm-2.0:servicemesh-grafana-prometheus" }, "product_reference": "servicemesh-grafana-prometheus", "relates_to_product_reference": "ossm-2.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-grafana.src as a component of OpenShift Service Mesh OSSM 2.0.0", "product_id": "ossm-2.0:servicemesh-grafana.src" }, "product_reference": "servicemesh-grafana.src", "relates_to_product_reference": "ossm-2.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-prometheus as a component of OpenShift Service Mesh OSSM 2.0.0", "product_id": "ossm-2.0:servicemesh-prometheus" }, "product_reference": "servicemesh-prometheus", "relates_to_product_reference": "ossm-2.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-prometheus.src as a component of OpenShift Service Mesh OSSM 2.0.0", "product_id": "ossm-2.0:servicemesh-prometheus.src" }, "product_reference": "servicemesh-prometheus.src", "relates_to_product_reference": "ossm-2.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-3664", "cwe": { "id": "CWE-601", "name": "URL Redirection to Untrusted Site ('Open Redirect')" }, "discovery_date": "2021-07-21T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhacm-2.11.z:rhacm2/application-ui-rhel8", "rhacm-2.11.z:rhacm2/console-rhel8", "rhacm-2.11.z:rhacm2/console-ui-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-rhel8", "rhacm-2.11.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.11.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.11.z:rhacm2/search-api-rhel8", "rhacm-2.11.z:rhacm2/search-ui-rhel8", "rhacm-2.12.z:rhacm2/application-ui-rhel8", "rhacm-2.12.z:rhacm2/console-rhel8", "rhacm-2.12.z:rhacm2/console-ui-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-rhel8", "rhacm-2.12.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.12.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.12.z:rhacm2/search-api-rhel8", "rhacm-2.12.z:rhacm2/search-ui-rhel8", "rhacm-2.13.z:rhacm2/application-ui-rhel8", "rhacm-2.13.z:rhacm2/console-rhel8", "rhacm-2.13.z:rhacm2/console-ui-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-rhel8", "rhacm-2.13.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.13.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.13.z:rhacm2/search-api-rhel8", "rhacm-2.13.z:rhacm2/search-ui-rhel8", "rhacm-2.14:rhacm2/application-ui-rhel8", "rhacm-2.14:rhacm2/console-rhel8", "rhacm-2.14:rhacm2/console-ui-rhel8", "rhacm-2.14:rhacm2/grc-ui-api-rhel8", "rhacm-2.14:rhacm2/grc-ui-rhel8", "rhacm-2.14:rhacm2/kui-web-terminal-rhel8", "rhacm-2.14:rhacm2/mcm-topology-api-rhel8", "rhacm-2.14:rhacm2/search-api-rhel8", "rhacm-2.14:rhacm2/search-ui-rhel8", "rhacm-2.15:rhacm2/application-ui-rhel8", "rhacm-2.15:rhacm2/console-rhel8", "rhacm-2.15:rhacm2/console-ui-rhel8", "rhacm-2.15:rhacm2/grc-ui-api-rhel8", "rhacm-2.15:rhacm2/grc-ui-rhel8", "rhacm-2.15:rhacm2/kui-web-terminal-rhel8", "rhacm-2.15:rhacm2/mcm-topology-api-rhel8", "rhacm-2.15:rhacm2/search-api-rhel8", "rhacm-2.15:rhacm2/search-ui-rhel8" ] } ], "notes": [ { "category": "description", "text": "An input validation flaw was found in the nodejs url-parse library, which incorrectly parses a URL that contains backslashes. This flaw allows an attacker to specify a relative URL and cause the browser to redirect to a malicious website. The highest threat from this vulnerability is to integrity. Related vulnerability is CVE-2021-27515.", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "gitops-1:openshift-gitops-1/argocd-rhel8", "openshift-4:openshift4/ose-grafana", "openshift-4:openshift4/ose-prometheus-rhel9", "openshift-4:openshift4/ose-thanos-rhel9", "ossm-2.0:servicemesh-grafana", "ossm-2.0:servicemesh-grafana-prometheus", "ossm-2.0:servicemesh-grafana.src", "ossm-2.0:servicemesh-prometheus", "ossm-2.0:servicemesh-prometheus.src", "quay-3.6:quay/quay-rhel8" ], "known_not_affected": [ "rhacm-2.11.z:rhacm2/application-ui-rhel8", "rhacm-2.11.z:rhacm2/console-rhel8", "rhacm-2.11.z:rhacm2/console-ui-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-rhel8", "rhacm-2.11.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.11.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.11.z:rhacm2/search-api-rhel8", "rhacm-2.11.z:rhacm2/search-ui-rhel8", "rhacm-2.12.z:rhacm2/application-ui-rhel8", "rhacm-2.12.z:rhacm2/console-rhel8", "rhacm-2.12.z:rhacm2/console-ui-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-rhel8", "rhacm-2.12.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.12.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.12.z:rhacm2/search-api-rhel8", "rhacm-2.12.z:rhacm2/search-ui-rhel8", "rhacm-2.13.z:rhacm2/application-ui-rhel8", "rhacm-2.13.z:rhacm2/console-rhel8", "rhacm-2.13.z:rhacm2/console-ui-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-rhel8", "rhacm-2.13.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.13.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.13.z:rhacm2/search-api-rhel8", "rhacm-2.13.z:rhacm2/search-ui-rhel8", "rhacm-2.14:rhacm2/application-ui-rhel8", "rhacm-2.14:rhacm2/console-rhel8", "rhacm-2.14:rhacm2/console-ui-rhel8", "rhacm-2.14:rhacm2/grc-ui-api-rhel8", "rhacm-2.14:rhacm2/grc-ui-rhel8", "rhacm-2.14:rhacm2/kui-web-terminal-rhel8", "rhacm-2.14:rhacm2/mcm-topology-api-rhel8", "rhacm-2.14:rhacm2/search-api-rhel8", "rhacm-2.14:rhacm2/search-ui-rhel8", "rhacm-2.15:rhacm2/application-ui-rhel8", "rhacm-2.15:rhacm2/console-rhel8", "rhacm-2.15:rhacm2/console-ui-rhel8", "rhacm-2.15:rhacm2/grc-ui-api-rhel8", "rhacm-2.15:rhacm2/grc-ui-rhel8", "rhacm-2.15:rhacm2/kui-web-terminal-rhel8", "rhacm-2.15:rhacm2/mcm-topology-api-rhel8", "rhacm-2.15:rhacm2/search-api-rhel8", "rhacm-2.15:rhacm2/search-ui-rhel8" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3664" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3664" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3664" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "openshift-4:openshift4/ose-grafana", "openshift-4:openshift4/ose-prometheus-rhel9", "openshift-4:openshift4/ose-thanos-rhel9" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "gitops-1:openshift-gitops-1/argocd-rhel8", "ossm-2.0:servicemesh-grafana", "ossm-2.0:servicemesh-grafana-prometheus", "ossm-2.0:servicemesh-grafana.src", "ossm-2.0:servicemesh-prometheus", "ossm-2.0:servicemesh-prometheus.src", "quay-3.6:quay/quay-rhel8" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM" }, "products": [ "gitops-1:openshift-gitops-1/argocd-rhel8", "openshift-4:openshift4/ose-grafana", "openshift-4:openshift4/ose-prometheus-rhel9", "openshift-4:openshift4/ose-thanos-rhel9", "ossm-2.0:servicemesh-grafana", "ossm-2.0:servicemesh-grafana-prometheus", "ossm-2.0:servicemesh-grafana.src", "ossm-2.0:servicemesh-prometheus", "ossm-2.0:servicemesh-prometheus.src", "quay-3.6:quay/quay-rhel8", "rhacm-2.11.z:rhacm2/application-ui-rhel8", "rhacm-2.11.z:rhacm2/console-rhel8", "rhacm-2.11.z:rhacm2/console-ui-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-rhel8", "rhacm-2.11.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.11.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.11.z:rhacm2/search-api-rhel8", "rhacm-2.11.z:rhacm2/search-ui-rhel8", "rhacm-2.12.z:rhacm2/application-ui-rhel8", "rhacm-2.12.z:rhacm2/console-rhel8", "rhacm-2.12.z:rhacm2/console-ui-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-rhel8", "rhacm-2.12.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.12.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.12.z:rhacm2/search-api-rhel8", "rhacm-2.12.z:rhacm2/search-ui-rhel8", "rhacm-2.13.z:rhacm2/application-ui-rhel8", "rhacm-2.13.z:rhacm2/console-rhel8", "rhacm-2.13.z:rhacm2/console-ui-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-rhel8", "rhacm-2.13.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.13.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.13.z:rhacm2/search-api-rhel8", "rhacm-2.13.z:rhacm2/search-ui-rhel8", "rhacm-2.14:rhacm2/application-ui-rhel8", "rhacm-2.14:rhacm2/console-rhel8", "rhacm-2.14:rhacm2/console-ui-rhel8", "rhacm-2.14:rhacm2/grc-ui-api-rhel8", "rhacm-2.14:rhacm2/grc-ui-rhel8", "rhacm-2.14:rhacm2/kui-web-terminal-rhel8", "rhacm-2.14:rhacm2/mcm-topology-api-rhel8", "rhacm-2.14:rhacm2/search-api-rhel8", "rhacm-2.14:rhacm2/search-ui-rhel8", "rhacm-2.15:rhacm2/application-ui-rhel8", "rhacm-2.15:rhacm2/console-rhel8", "rhacm-2.15:rhacm2/console-ui-rhel8", "rhacm-2.15:rhacm2/grc-ui-api-rhel8", "rhacm-2.15:rhacm2/grc-ui-rhel8", "rhacm-2.15:rhacm2/kui-web-terminal-rhel8", "rhacm-2.15:rhacm2/mcm-topology-api-rhel8", "rhacm-2.15:rhacm2/search-api-rhel8", "rhacm-2.15:rhacm2/search-ui-rhel8" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "gitops-1:openshift-gitops-1/argocd-rhel8", "openshift-4:openshift4/ose-grafana", "openshift-4:openshift4/ose-prometheus-rhel9", "openshift-4:openshift4/ose-thanos-rhel9", "ossm-2.0:servicemesh-grafana", "ossm-2.0:servicemesh-grafana-prometheus", "ossm-2.0:servicemesh-grafana.src", "ossm-2.0:servicemesh-prometheus", "ossm-2.0:servicemesh-prometheus.src", "quay-3.6:quay/quay-rhel8", "rhacm-2.11.z:rhacm2/application-ui-rhel8", "rhacm-2.11.z:rhacm2/console-rhel8", "rhacm-2.11.z:rhacm2/console-ui-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.11.z:rhacm2/grc-ui-rhel8", "rhacm-2.11.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.11.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.11.z:rhacm2/search-api-rhel8", "rhacm-2.11.z:rhacm2/search-ui-rhel8", "rhacm-2.12.z:rhacm2/application-ui-rhel8", "rhacm-2.12.z:rhacm2/console-rhel8", "rhacm-2.12.z:rhacm2/console-ui-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.12.z:rhacm2/grc-ui-rhel8", "rhacm-2.12.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.12.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.12.z:rhacm2/search-api-rhel8", "rhacm-2.12.z:rhacm2/search-ui-rhel8", "rhacm-2.13.z:rhacm2/application-ui-rhel8", "rhacm-2.13.z:rhacm2/console-rhel8", "rhacm-2.13.z:rhacm2/console-ui-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-api-rhel8", "rhacm-2.13.z:rhacm2/grc-ui-rhel8", "rhacm-2.13.z:rhacm2/kui-web-terminal-rhel8", "rhacm-2.13.z:rhacm2/mcm-topology-api-rhel8", "rhacm-2.13.z:rhacm2/search-api-rhel8", "rhacm-2.13.z:rhacm2/search-ui-rhel8", "rhacm-2.14:rhacm2/application-ui-rhel8", "rhacm-2.14:rhacm2/console-rhel8", "rhacm-2.14:rhacm2/console-ui-rhel8", "rhacm-2.14:rhacm2/grc-ui-api-rhel8", "rhacm-2.14:rhacm2/grc-ui-rhel8", "rhacm-2.14:rhacm2/kui-web-terminal-rhel8", "rhacm-2.14:rhacm2/mcm-topology-api-rhel8", "rhacm-2.14:rhacm2/search-api-rhel8", "rhacm-2.14:rhacm2/search-ui-rhel8", "rhacm-2.15:rhacm2/application-ui-rhel8", "rhacm-2.15:rhacm2/console-rhel8", "rhacm-2.15:rhacm2/console-ui-rhel8", "rhacm-2.15:rhacm2/grc-ui-api-rhel8", "rhacm-2.15:rhacm2/grc-ui-rhel8", "rhacm-2.15:rhacm2/kui-web-terminal-rhel8", "rhacm-2.15:rhacm2/mcm-topology-api-rhel8", "rhacm-2.15:rhacm2/search-api-rhel8", "rhacm-2.15:rhacm2/search-ui-rhel8" ] } ], "title": "URL Redirection to Untrusted Site" } ] }