CVE-2022-4039: Red Hat Openshift Container Platform

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.

Affected products

• Red Hat Openshift Container Platform: version 4.9 only; version 4.10 only
• Red Hat Openshift Container Platform For IBM Z: version 4.9 only; version 4.10 only
• Red Hat Openshift Container Platform For Linuxone: version 4.9 only; version 4.10 only
• Red Hat Openshift Container Platform For Power: version 4.9 only; version 4.10 only
• Red Hat Single Sign-On: version 7.0 only

Published 2023-09-22. Last modified 2026-06-17.