RHSA-2023:1452
Vulnerability from csaf_redhat
Published
2023-03-23 18:40
Modified
2024-11-22 22:23
Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps security update

Notes

Topic
An update is now available for Red Hat OpenShift GitOps 1.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Security Fix(es): * ArgoCD: Authenticated but unauthorized users may enumerate Application names via the API (CVE-2022-41354) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat OpenShift GitOps 1.8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Security Fix(es):\n\n* ArgoCD: Authenticated but unauthorized users may enumerate Application names via the API (CVE-2022-41354)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:1452",
        "url": "https://access.redhat.com/errata/RHSA-2023:1452"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2167820",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167820"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1452.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift GitOps security update",
    "tracking": {
      "current_release_date": "2024-11-22T22:23:34+00:00",
      "generator": {
        "date": "2024-11-22T22:23:34+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2023:1452",
      "initial_release_date": "2023-03-23T18:40:37+00:00",
      "revision_history": [
        {
          "date": "2023-03-23T18:40:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-03-23T18:40:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T22:23:34+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps 1.8",
                "product": {
                  "name": "Red Hat OpenShift GitOps 1.8",
                  "product_id": "8Base-GitOps-1.8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1.8::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
                "product": {
                  "name": "openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
                  "product_id": "openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x",
                "product": {
                  "name": "openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x",
                  "product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x",
                  "product_id": "openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x",
                "product": {
                  "name": "openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x",
                  "product_id": "openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x",
                "product": {
                  "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x",
                  "product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x",
                  "product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.8.1-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
                "product": {
                  "name": "openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
                  "product_id": "openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64",
                "product": {
                  "name": "openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64",
                  "product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64",
                  "product_id": "openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64",
                "product": {
                  "name": "openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64",
                  "product_id": "openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64",
                "product": {
                  "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64",
                  "product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64",
                "product": {
                  "name": "openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64",
                  "product_id": "openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64",
                  "product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.8.1-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64",
                "product": {
                  "name": "openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64",
                  "product_id": "openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64",
                "product": {
                  "name": "openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64",
                  "product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64",
                  "product_id": "openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64",
                "product": {
                  "name": "openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64",
                  "product_id": "openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64",
                "product": {
                  "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64",
                  "product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64",
                  "product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.8.1-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
                "product": {
                  "name": "openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
                  "product_id": "openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le",
                "product": {
                  "name": "openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le",
                  "product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le",
                  "product_id": "openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le",
                "product": {
                  "name": "openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le",
                  "product_id": "openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le",
                "product": {
                  "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le",
                  "product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.8.1-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le",
                "product": {
                  "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le",
                  "product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.8.1-1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64"
        },
        "product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64"
        },
        "product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x"
        },
        "product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le"
        },
        "product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x"
        },
        "product_reference": "openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le"
        },
        "product_reference": "openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64"
        },
        "product_reference": "openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64"
        },
        "product_reference": "openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64"
        },
        "product_reference": "openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x"
        },
        "product_reference": "openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x"
        },
        "product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64"
        },
        "product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64 as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64"
        },
        "product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le as a component of Red Hat OpenShift GitOps 1.8",
          "product_id": "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le"
        },
        "product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le",
        "relates_to_product_reference": "8Base-GitOps-1.8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-41354",
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64",
            "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le",
            "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le",
            "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le",
            "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64",
            "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure flaw was found in Argo CD. This issue may allow unauthorized users to enumerate application names by inspecting API error messages and could use the discovered application names as the starting point of another attack. For example, the attacker might use their knowledge of an application name to convince an administrator to grant higher privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ArgoCD: Authenticated but unauthorized users may enumerate Application names via the API",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
          "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
          "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64"
        ],
        "known_not_affected": [
          "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:1ab2110a22912acf77fdf8dbfd801cfffea1bed67715629cfdc03e23c882d318_arm64",
          "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:2eabb947c4943a288c1c549ee601c853d138107414142c43be82b007af0bb9ce_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:6af1ef2d889dc40c21a1c277955a50bad53a612cb774b82718e1ffc042dc0bd7_s390x",
          "8Base-GitOps-1.8:openshift-gitops-1/console-plugin-rhel8@sha256:fcd81ad2a1751443844553a0900a2dceae7e92843c97cd6aa3305560a976ca67_ppc64le",
          "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:1f467badefe68f76de6da239a2ce7e7933b298d289738df1080d8d0c40a7349b_s390x",
          "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:4db889fd9eb4c451d086f5f79f5eb850379f8a3f35c5fe67e47c538bdfbb8b1f_ppc64le",
          "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:6346a5027982d911aa5cadc0a2b6d77b76a76a7563fa67e91395e1ba0e554019_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/dex-rhel8@sha256:6bc1a6010682bd80ae100455a934a92f37b13f70afa1038c8d8f10ec39727ee7_arm64",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-operator-bundle@sha256:273dcda07cdc475069a1dd41ecb2a91c51b2648f94eff57e9fd7e2e6aff75623_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:50c624fe3202213c4192a430edbebb00a3b00d492d6aee264acd7894a03b8e5d_ppc64le",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:7fb57dec46089f14b40b58a59bb3e007d2631e6afe2b210b8898be04d8d86459_s390x",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:86160eb773563bde3f59fef387fe50ede0bb5108f711aa1759bd48f557b72b99_arm64",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8-operator@sha256:f79bccbc97918a25339de9637fdba1f3362d6812d89a41c2a60e1d4264dfefca_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:21fdf98c4ba9c28533c02067dab1ef59f109d925650eeeaddec508f34d632b0d_arm64",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:b119feb01e5b2a97e9bd36ecca931cefaf154936110744b5b89968fddc2d9fef_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:e317827fc5621773fcd6cb653aca9e09a300999d427ee11f449812a5eb30bd64_ppc64le",
          "8Base-GitOps-1.8:openshift-gitops-1/gitops-rhel8@sha256:eaf99c68a30acc85c02741572210811da7d34b7af728a29bef2b684bcc82a5e4_s390x",
          "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:3aa62b6fd14d01200a4d92562ad91dee37a555968a451ceefb101df259d95a91_s390x",
          "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:3b228ebc41380285e3a91ab57a7a55112092d6d65cf8afb025847055517c719e_amd64",
          "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:5b80dc7f0c607134f663ca082df07c159ddacb688c6252dbc2f535bc1e825746_arm64",
          "8Base-GitOps-1.8:openshift-gitops-1/kam-delivery-rhel8@sha256:6a5619fee1fd7b916e32c0d263622ad11e35fb8f51d5adff05867337af78112b_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-41354"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-41354",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-41354"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-41354",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41354"
        },
        {
          "category": "external",
          "summary": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq",
          "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-2q5c-qw9c-fmvq"
        }
      ],
      "release_date": "2023-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-03-23T18:40:37+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:1452"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:1adeecbe2a1b13b1ccbaca6de748eebea17612c78ffaa45274dcb564e6997524_s390x",
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:aae43c32dc5da71ba9be9efd495ccde25535cdbbe1d78917f48d8fcfed269222_ppc64le",
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:eee39439704ffea3376cdd686392dedb4e5ed25280e217167b8b2223286a3f32_amd64",
            "8Base-GitOps-1.8:openshift-gitops-1/argocd-rhel8@sha256:f59359e26a0cc57d4e3abe640284c7ba980e72b830f480fa91825c88ecd062e4_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "ArgoCD: Authenticated but unauthorized users may enumerate Application names via the API"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.