Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Red Hat RHC Worker Script Security Update Leaves Systems Open to Attack
published 1 year ago
Summary
A security update is available for Red Hat's RHC worker script, which is used by Red Hat CloudForms. If left unpatched, an attacker could exploit this vulnerability to gain unauthorized access to sensitive information. To protect your systems, apply the latest security update as soon as possible.
What to do
- Update redhat rhc-worker-script to version 0:0.10-2.el7_9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_els:7 | redhat | rhc-worker-script |
< 0:0.10-2.el7_9 Fix: upgrade to 0:0.10-2.el7_9
|
Original advisory text
Red Hat Security Advisory: rhc-worker-script security update
References
- https://access.redhat.com/errata/RHSA-2024:10133 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2315719 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10133.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-9355 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-9355 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-9355 Vendor Advisory
- https://github.com/golang-fips/openssl/pull/198 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-24791 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24791 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24791 Vendor Advisory
- https://go.dev/cl/591255 Third Party Advisory
- https://go.dev/issue/67555 Third Party Advisory
- https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published25 Nov 2024
Updated30 Apr 2026
First seen30 Apr 2026
Sources
RHSA-2024:10133 · OSV
Track software like this
Free during beta