Red Hat Advanced Cluster Management: Mehrere Schwachstellen ermöglichen Privilegieneskalation
WID-SEC-2022-0235 · first 04.03.2022 · updated 09.10.2026 · CVSS 9,8
What it is about
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution. Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um seine Privilegien zu erhöhen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- seine Privilegien zu erhöhen
Am I affected?
Affected according to the BSI:
- Debian Linux
- Red Hat Enterprise Linux
- HCL Domino
- SUSE Linux
- Red Hat OpenShift Data Foundation <4.19
- Red Hat OpenShift Data Foundation <4.18
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Red Hat OpenShift Data Foundation 4.19
- Red Hat OpenShift Data Foundation 4.18
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- RedHat Security Advisory vom 2022-03-03 access.redhat.com
- RedHat Security Advisory vom 2022-03-03 access.redhat.com
- Red Hat Security Advisory RHSA-2022:0856 vom 2022-03-14 access.redhat.com
- Red Hat Security Advisory RHSA-2022:4956 vom 2022-06-09 access.redhat.com
- Red Hat Security Advisory RHSA-2022:1083 vom 2022-03-28 access.redhat.com
- Red Hat Security Advisory RHSA-2022:1081 vom 2022-03-28 access.redhat.com
- Red Hat Security Advisory RHSA-2022:1361 vom 2022-04-13 access.redhat.com
- Red Hat Security Advisory RHSA-2022:1372 vom 2022-04-14 access.redhat.com
- Red Hat Security Advisory RHSA-2022:1476 vom 2022-04-21 access.redhat.com
- SUSE Security Update SUSE-SU-2022:1507-1 vom 2022-05-03 lists.suse.com
- Red Hat Security Advisory RHSA-2022:5201 vom 2022-06-28 access.redhat.com
- Red Hat Security Advisory RHSA-2022:5483 vom 2022-07-01 access.redhat.com
- Red Hat Security Advisory RHSA-2022:5531 vom 2022-07-12 access.redhat.com
- Red Hat Security Advisory RHSA-2022:5069 vom 2022-08-10 access.redhat.com
- Red Hat Security Advisory RHSA-2022:6813 vom 2022-10-05 access.redhat.com
- Red Hat Security Advisory RHSA-2022:6835 vom 2022-10-06 access.redhat.com
- Red Hat Security Advisory RHSA-2022:8502 vom 2022-11-16 access.redhat.com
- Red Hat Security Advisory RHSA-2022:8524 vom 2022-11-17 access.redhat.com
- Red Hat Security Advisory RHSA-2022:8938 vom 2022-12-13 access.redhat.com
- HCL Article KB0102172 vom 2022-12-19 support.hcltechsw.com
- SUSE Security Update SUSE-SU-2024:0486-1 vom 2024-02-15 lists.suse.com
- SUSE Security Update SUSE-SU-2024:0487-1 vom 2024-02-15 lists.suse.com
- Debian Security Advisory DLA-4013 vom 2025-01-11 lists.debian.org
- SUSE Security Update SUSE-SU-2025:03540-1 vom 2025-10-10 lists.suse.com
- Red Hat Security Advisory RHSA-2025:21368 vom 2025-11-13 access.redhat.com
and 7 more sources in the original advisory
CVE: CVE-2021-22963, CVE-2021-23566, CVE-2021-43565, CVE-2021-43816, CVE-2022-0155, CVE-2022-0235, CVE-2022-24450
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.