Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Red Hat Insights Client Security Update Fixes Multiple Vulnerabilities
published 2 years ago
Summary
A security update has been released for Red Hat Insights Client to fix multiple vulnerabilities that could allow an attacker to access sensitive information or execute malicious code. This update is highly recommended to ensure the security and integrity of your system. You should update your Insights Client software as soon as possible.
What to do
- Update redhat insights-client to version 0:3.2.2-1.el8_6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:8.6::appstream | redhat | insights-client |
< 0:3.2.2-1.el8_6 Fix: upgrade to 0:3.2.2-1.el8_6
|
Original advisory text
Red Hat Security Advisory: insights-client security update
References
- https://access.redhat.com/errata/RHSA-2023:6284 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2227027 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6284.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-3972 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-3972 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3972 Vendor Advisory
- https://github.com/RedHatInsights/insights-core/pull/3878 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published16 Sep 2024
Updated7 Apr 2026
First seen7 Apr 2026
Sources
RHSA-2023:6284 · OSV
Track software like this
Free during beta