{"id":"EUVD-2025-203383","enisaUuid":"ee8fccf9-a66c-3ef4-91b6-6f9e392f6590","description":"A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster.","datePublished":"Dec 15, 2025, 3:36:49 PM","dateUpdated":"Jan 22, 2026, 3:50:50 PM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","references":"https://access.redhat.com/errata/RHSA-2025:23203\nhttps://access.redhat.com/errata/RHSA-2025:23206\nhttps://access.redhat.com/errata/RHSA-2025:23207\nhttps://access.redhat.com/errata/RHSA-2026:1017\nhttps://access.redhat.com/security/cve/CVE-2025-13888\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2418361\nhttps://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef\nhttps://github.com/redhat-developer/gitops-operator/pull/897\nhttps://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2\n","aliases":"CVE-2025-13888\nGHSA-pcqx-8qww-7f4v\n","assigner":"redhat","epss":0.69,"enisaIdProduct":[{"id":"1a9172f2-8d76-3c70-af76-1b21b7c90a2d","product":{"name":"Red Hat OpenShift GitOps 1.18","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc"},{"id":"5005e67e-1ef2-3a6b-8183-0db311df0adf","product":{"name":"Red Hat OpenShift GitOps 1.17","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1"},{"id":"ae5db938-509c-3b91-b3f1-e7919a78619f","product":{"name":"Red Hat OpenShift GitOps 1.16","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa"},{"id":"c827a2c5-805c-308b-97f7-64f5deeb372a","product":{"name":"Red Hat OpenShift GitOps 1.18","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:43ba408b8ed58259bf338fd29260d936fbde9846f772d0580b3e7486ef8ea300"},{"id":"c900e61a-b116-3277-8acc-ef2b7ac6c519","product":{"name":"gitops-operator","vendor":{"name":"redhat-developer"}},"product_version":"0 \u003c1.16.2"}],"enisaIdVendor":[{"id":"67064f97-1b47-33a1-8a9b-004c1fc658b0","vendor":{"name":"redhat-developer"}},{"id":"f3fa88ec-e82f-3654-ba25-4c0ecb09065e","vendor":{"name":"Red Hat"}}],"enisaIdVulnerability":[{"id":"489a8946-ce1e-360c-812c-bef1da7b3b13","vulnerability":{"id":"CVE-2025-13888","description":"A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster.","datePublished":"Dec 15, 2025, 3:36:49 PM","dateUpdated":"Jan 22, 2026, 3:50:50 PM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","references":"https://access.redhat.com/errata/RHSA-2025:23203\nhttps://access.redhat.com/errata/RHSA-2025:23206\nhttps://access.redhat.com/errata/RHSA-2025:23207\nhttps://access.redhat.com/errata/RHSA-2026:1017\nhttps://access.redhat.com/security/cve/CVE-2025-13888\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2418361\nhttps://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef\nhttps://github.com/redhat-developer/gitops-operator/pull/897\nhttps://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2\n","enisa_id":"EUVD-2025-203383\n","assigner":"redhat","epss":0.69,"dataProcessed":"Nov 10, 2026, 7:38:42 AM","vulnerabilityProduct":[{"id":"5741c169-1a67-3a6b-b5be-3cc8fcb85109","product":{"name":"Red Hat OpenShift GitOps 1.18","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc"},{"id":"7f43ce87-becd-3a9a-8971-4be61c3a5aa0","product":{"name":"gitops-operator","vendor":{"name":"redhat-developer"}},"product_version":"0 \u003c1.16.2"},{"id":"a009bb03-58e1-36d0-b1da-ae32944af258","product":{"name":"Red Hat OpenShift GitOps 1.17","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1"},{"id":"e260aa74-e248-33bf-8a00-0e1206b1c619","product":{"name":"Red Hat OpenShift GitOps 1.18","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:43ba408b8ed58259bf338fd29260d936fbde9846f772d0580b3e7486ef8ea300"},{"id":"ebd58ca4-d9bd-3f05-8441-693e08ff09c4","product":{"name":"Red Hat OpenShift GitOps 1.16","vendor":{"name":"Red Hat"}},"product_version":"patch: sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa"}],"vulnerabilityVendor":[{"id":"a46dd06b-9332-3b81-a4ab-97c6f12683dc","vendor":{"name":"Red Hat"}},{"id":"f90c4959-43cd-320e-a128-ed9a43e0ec77","vendor":{"name":"redhat-developer"}}]}},{"id":"5eb8da3f-beff-3c8d-96bc-0b8c7c0c1579","vulnerability":{"id":"GHSA-pcqx-8qww-7f4v","description":"OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources","datePublished":"Dec 15, 2025, 6:30:39 PM","dateUpdated":"Jan 22, 2026, 6:30:29 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-13888\nhttps://github.com/redhat-developer/gitops-operator/pull/897\nhttps://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef\nhttps://access.redhat.com/errata/RHSA-2025:23203\nhttps://access.redhat.com/errata/RHSA-2025:23206\nhttps://access.redhat.com/errata/RHSA-2025:23207\nhttps://access.redhat.com/errata/RHSA-2026:1017\nhttps://access.redhat.com/security/cve/CVE-2025-13888\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2418361\nhttps://github.com/redhat-developer/gitops-operator\nhttps://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2\n","enisa_id":"EUVD-2025-203383\n","aliases":"GHSA-pcqx-8qww-7f4v\nCVE-2025-13888\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:44:24 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"0132013b-a997-359d-816b-2585c1fde7de","advisory":{"id":"RHSA-2025:23207","description":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.5 security update","summary":"Important: Red Hat OpenShift GitOps v1.16.5 security update","datePublished":"Dec 15, 2025, 3:40:35 PM","dateUpdated":"Nov 7, 2026, 10:08:23 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:23207\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23207.json\n","aliases":"CVE-2024-45337\nCVE-2024-45338\nCVE-2025-13888\nCVE-2025-49844\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0853b39a-2623-3a75-b20b-5603891e584d","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64","vendor":{"name":"Red Hat"}}},{"id":"14aa1e5d-f04f-37e4-aaf8-500cf5d3640d","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64","vendor":{"name":"Red Hat"}}},{"id":"255cd34c-4fc5-3930-8621-5cc0b6487a14","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64","vendor":{"name":"Red Hat"}}},{"id":"2709c0fc-370f-3e26-ae2f-f95000168d27","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64","vendor":{"name":"Red Hat"}}},{"id":"2e7f71e5-2537-33a7-b793-f0fff917cd3f","product":{"name":"Red Hat OpenShift GitOps 1.16","vendor":{"name":"Red Hat"}}},{"id":"2ee5255f-58e3-3a39-80b6-6c42bb85e921","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x","vendor":{"name":"Red Hat"}}},{"id":"3320076e-b8ed-304f-984c-37835f3a2712","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"46e54d9b-2ca2-37e2-9838-892894c8fa26","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"47d8567a-5004-36a5-b8bf-d5f95e05268e","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64","vendor":{"name":"Red Hat"}}},{"id":"49c6ab60-e19d-39ce-b737-f45639f4de8b","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x","vendor":{"name":"Red Hat"}}},{"id":"4a8b3237-807c-3456-ac19-1d6043310b9e","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x","vendor":{"name":"Red Hat"}}},{"id":"4bd3828d-ddcb-389d-a72d-46fb646ab468","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x","vendor":{"name":"Red Hat"}}},{"id":"55e7daf3-d311-3399-81a4-78a85d1de67f","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"5c325090-a6bd-3bfd-94dc-1248ffec50d1","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64","vendor":{"name":"Red Hat"}}},{"id":"5d8cce8e-8689-321a-80b9-e982b83e1c78","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"6270afee-8d2f-3630-8d90-c892406808ac","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64","vendor":{"name":"Red Hat"}}},{"id":"7538dfb9-3f20-3a9c-80aa-0268e12df545","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64","vendor":{"name":"Red Hat"}}},{"id":"84b75048-860a-3d04-84ae-a42da05e710d","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64","vendor":{"name":"Red Hat"}}},{"id":"878df937-ab3e-3244-8b57-e4913570b88b","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"8bcc6dfc-4f9d-310b-8202-db9580490b8b","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64","vendor":{"name":"Red Hat"}}},{"id":"8cc40625-40b2-3083-8faa-bfce0b26ec16","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x","vendor":{"name":"Red Hat"}}},{"id":"933678bd-2fd2-3632-8737-da8c4550f943","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"942ada25-d9b8-3af0-8eff-9cff9fb0d63d","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x","vendor":{"name":"Red Hat"}}},{"id":"a3facaf5-330c-3d35-b718-28ad9fbbdaa3","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64","vendor":{"name":"Red Hat"}}},{"id":"acc934d3-b06b-3aa0-938f-4aece2d3cb54","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x","vendor":{"name":"Red Hat"}}},{"id":"b007662d-9908-3324-be9a-c6b76d405fc7","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64","vendor":{"name":"Red Hat"}}},{"id":"bd490696-f87b-3db8-9897-9003995d9bfa","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64","vendor":{"name":"Red Hat"}}},{"id":"d4d94538-3b78-377c-849f-babe93c9fc9c","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d8f4139e-1e5f-35ae-a5ce-3c8daad060a8","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64","vendor":{"name":"Red Hat"}}},{"id":"dccc1f9b-63f9-3fa2-9660-7e3a23bd0dfa","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64","vendor":{"name":"Red Hat"}}},{"id":"e441c609-6e6a-337e-8478-06abaef4c329","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64","vendor":{"name":"Red Hat"}}},{"id":"e56e1701-63a7-377a-9cc2-2f6730ae38a8","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64","vendor":{"name":"Red Hat"}}},{"id":"e92123ce-5921-3c6f-abe0-a615f1595bb4","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"f108d44a-effc-3fd0-9408-aa4c7cba6ffc","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64","vendor":{"name":"Red Hat"}}},{"id":"f15078cd-9f26-3893-b204-2979ec88378e","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x","vendor":{"name":"Red Hat"}}},{"id":"f65e56e1-a267-3a1b-a4bf-555ec148097e","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"f98876db-5e83-3dcc-b919-20b2aabf04dd","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x","vendor":{"name":"Red Hat"}}},{"id":"fa10cb39-bf75-3f30-a7d9-403977704dad","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64","vendor":{"name":"Red Hat"}}}]}},{"id":"07d884bd-955c-3fc1-a447-ba5caff9f68f","advisory":{"id":"RHSA-2026:1017","description":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update","summary":"Important: Red Hat OpenShift GitOps v1.18.3 security update","datePublished":"Jan 22, 2026, 3:47:03 PM","dateUpdated":"Nov 7, 2026, 10:09:48 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:1017\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1017.json\n","aliases":"CVE-2025-13888\nCVE-2025-47913\nCVE-2025-55190\nCVE-2025-58183\nCVE-2025-61729\nCVE-2025-68156\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"01de3dc8-5324-32a1-96ee-b574119e6b18","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0eb572fc96ae2e1973ce43515f03121965600bb09ef0b995eb467f5965c2246c_arm64","vendor":{"name":"Red Hat"}}},{"id":"040f979a-51cb-3df2-80af-e745f1162654","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:1cbde70be8f1035b0f45b02e0663c28aa444ea5bc2c8bca580ff164dcfff4196_amd64","vendor":{"name":"Red Hat"}}},{"id":"078e2c85-0beb-3875-80ca-39eea0ea1345","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:792cbe51a6e0f80d9a97b5a6a538a36f756467624144ad3af2c2da53f85db68c_s390x","vendor":{"name":"Red Hat"}}},{"id":"0a3b0373-8f12-342a-91d0-a5323d61ef22","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:4bb1a9bd246dac5d17ea6bb1556d7ebb87e794369f75913d3d197d2c55a48015_amd64","vendor":{"name":"Red Hat"}}},{"id":"2fb1b8ec-bff4-306b-acb7-43ccb752fa9f","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:6f16630ff37a5e18b5f8eee782edd6ada351a60b41fdab1bbfda27ebb297135a_arm64","vendor":{"name":"Red Hat"}}},{"id":"357ad9b7-c754-352f-98c1-1a333c30331c","product":{"name":"Red Hat OpenShift GitOps 1.18","vendor":{"name":"Red Hat"}}},{"id":"45a12d06-fa8e-31e1-b391-2ce2f68319c1","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a333f6b8ae405b22c746a02bd38a125753a347e7e2c352ec690fa97388b3a40b_s390x","vendor":{"name":"Red Hat"}}},{"id":"496894e7-dd55-3499-be22-e5b659105a72","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0f883371ffee9d87547a4dc9524a35c5e6cce840a722bf3a01b1be3c1396fdb1_arm64","vendor":{"name":"Red Hat"}}},{"id":"49e8ebbd-329b-35c0-abb2-9885c8464cd7","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:7fbb7d98b130e1dc6c9f5f440244a05bff22e34ab70f5e57e45d4b70e4e3f8da_arm64","vendor":{"name":"Red Hat"}}},{"id":"5f6e7d5d-fd9b-35fa-9a06-873149057423","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:f87ac5bb84230c4c34f5404adbc45347a295fb1e60095c2e4ad1e0ea126382b5_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"62d391b2-3fc9-3ec9-8980-fb11993366d8","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:571c6d9d4e84c6fcd278e13f15e71b527b618ac7d98c477c516d91e0097ba40c_arm64","vendor":{"name":"Red Hat"}}},{"id":"6332a079-1aea-3ecc-af96-271b1f162fc7","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ed37ac2ef10a9107672556fe62e19020d470745a0ec04378ed840949c49a6234_amd64","vendor":{"name":"Red Hat"}}},{"id":"6686de85-1400-3f5f-837f-73bcbf113214","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6e8d1e3c7bee9c2c2bee357af24bae34510fe6b87075b98f5be34e41dd70d152_s390x","vendor":{"name":"Red Hat"}}},{"id":"686552dc-7501-3446-b633-ac863ad95776","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:de7cde72fcb72eccc9f5ea89eed7094e4c976c3e331c48ef450339323a326da1_s390x","vendor":{"name":"Red Hat"}}},{"id":"6c0023ef-ba0e-3a7f-b366-6f2bf5f8e3ae","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:1992f4b3414b6955295827e06e8e5e635f754eb3e0b52ca181e80add613d1ba4_s390x","vendor":{"name":"Red Hat"}}},{"id":"73ded14e-71f7-3e15-863a-9047cdc36459","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b6c961fab1178fcc25126ac214d0a7e15bf5738291e2e16c4e05ec320e54fcca_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"77710792-76c9-3468-b535-df0e2ab93e7f","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0330e4aab6eb9d7c54417d2a6c5aaf959319eb1c811ab91085570295dc19b258_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7c21c5c8-7033-3476-80d1-1254be1cf48f","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:32ae33eb3d84b30020cb6732e5c84f76cbd2de6abdd7b42e72be887015c49d35_amd64","vendor":{"name":"Red Hat"}}},{"id":"8646fb9d-98de-3ddc-8ac4-2477887c7dd2","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:58b596569b8de68d7474d949fd30d9a1666f1f08ea81e8264b9132263b61377b_s390x","vendor":{"name":"Red Hat"}}},{"id":"87c2245f-f669-3e5b-9e4b-bb7475358733","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:1ac33bdd539b1bf2033e27f3127badf1afd2d5fdeef9fd51f00feeffdd936f32_arm64","vendor":{"name":"Red Hat"}}},{"id":"88332679-7d9a-3882-92ef-7f62b6055a84","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ae7a2d5c703f6caa7d4facffe3c141bed9739b88967f5a832cf9005b2f815561_amd64","vendor":{"name":"Red Hat"}}},{"id":"8e285270-b9bd-35b1-a639-aad0ff75ba24","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:779c33c3679e47ebca0af343ba6e26d2723cfc9affdcee4df54078ef68278016_amd64","vendor":{"name":"Red Hat"}}},{"id":"910c8f43-7be2-3b3c-b521-748ae6c1daae","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:bca47a6bb7edb70b24927ea02484c91bc4ce35cc8ebb24f5d68cb28193e77fda_s390x","vendor":{"name":"Red Hat"}}},{"id":"934ebfbd-81b0-32df-b68e-9ffbb6d37fbf","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:e73fa4b644e17e520cc9836d4b235a5ae02e10a6a21addc2ae959832d4e08143_s390x","vendor":{"name":"Red Hat"}}},{"id":"96fb3520-63db-35b5-b85b-9ddca92fd5e0","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:88d55cc7ec87db114cc60c9c7a67e9c6a69aae69c30a6c076bd94f239a84498c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"99d7aaea-3e73-3036-a136-7f7301cc6e6b","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:a621f4cfd83907d57317ce941f470ba4b0fb5d599aab38db936e591dde426404_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"9bab0cbf-ba42-3251-874b-21ef5b87ded2","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:a4e9887db8647c4e958df4725f08340a9c6a462cd18fd2bf9c9f1fc939649740_amd64","vendor":{"name":"Red Hat"}}},{"id":"9be1253a-4f61-3ca5-bdae-ad7cd35440d6","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:1438757fd131c12d8ae3a1edb5757bc63114b882d00563be2857917611008418_amd64","vendor":{"name":"Red Hat"}}},{"id":"9c73cc25-61d6-3692-949a-f1e79a086709","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:ab7de39ebdcc363fe61d919ebf430d6e533ddc108075c19f9c9e6d71938bfd6e_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"ab92fb90-40f4-3539-958c-7eaacefa868d","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:54a92917be83722915ce05181652988342015eeb3e54fa3b4dd226d6fd493ccd_arm64","vendor":{"name":"Red Hat"}}},{"id":"bc39b96f-6a05-39d3-b7a5-d454f3988147","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:259bb75abc6b464d9badf8b110ab239232152010ada0c407241fab47ecbbae6e_s390x","vendor":{"name":"Red Hat"}}},{"id":"c6abf989-3c72-3388-8b0e-d9b8b69e306f","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:10aa721d5a3c55fad979603898fa3b5d504c4911559b8615edfce9a5d0653ff0_arm64","vendor":{"name":"Red Hat"}}},{"id":"d282b5e3-84f9-36c2-831c-a2b5ee1f1337","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d529b4bbae3cfcf25ea91a29d3c9eb701ef6a3a54e6e0c0117c649f3e4dbe2dc_arm64","vendor":{"name":"Red Hat"}}},{"id":"d725af3b-2e1f-3c2d-8549-fb3deecfc48a","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ddc27dbea59c611ffb5394114a6c754397cc0032ba3487a3f03041ed34cfce30_amd64","vendor":{"name":"Red Hat"}}},{"id":"da08e5aa-0356-326f-b923-78cb936df72b","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:43ba408b8ed58259bf338fd29260d936fbde9846f772d0580b3e7486ef8ea300_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"e7fa8514-3641-3b1c-963d-5647969c709a","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:a6141b3b5508dc9690ae15ebc3efd33a3fc71382a7dd449a954ffe181f8cd138_s390x","vendor":{"name":"Red Hat"}}},{"id":"ead0ce2f-37a9-3ded-986a-c8eb9908d0e3","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8286093133d109fe0d852491fda66c66d893527f3364c587b6d09823088bcba6_amd64","vendor":{"name":"Red Hat"}}},{"id":"ecf36443-9568-38b9-aa21-6a53e2ec5646","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:f8d8f51bd4aeba9dcfd4edad0720410d289ac0e7a2642c90128d506d69d42c77_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"efbbee1f-bad6-3541-b43a-7a4a7b4e10d6","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3cde1fe9926ec2d6d7618cee7a053b1f66c8ebe1a5f6d9e097914b3d3d6f8ca1_amd64","vendor":{"name":"Red Hat"}}},{"id":"f2308c7e-e19c-3f63-b9d5-818d8654c1ec","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:853107e7329e189ded3fc5ca657366e27010f468b1be813264efd9e2cf90c906_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"f2771fdc-a0c6-3e4f-a38a-d661a2780594","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:376ef09554debe6042424f2b4464922cf1aeb14d801fea5c81900d24ce028a39_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"f8a04c51-6aed-30d2-aba1-7f96f6713568","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a0236e0cf364d15553a77f0c12f8f8c0bb12ebf2c49c43c68da4f3f28b93e781_arm64","vendor":{"name":"Red Hat"}}}]}},{"id":"4953b7eb-550b-38c7-bbff-ce2d8738646d","advisory":{"id":"WID-SEC-W-2025-2861","description":"Red Hat OpenShift GitOps: Schwachstelle ermöglicht Erlangen von Administratorrechten","summary":"Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift GitOps ausnutzen, um Administratorrechte zu erlangen.","datePublished":"Dec 16, 2025, 11:00:00 PM","dateUpdated":"Jan 22, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2861.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2025-2861\n","aliases":"CVE-2025-13888\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"4d70ad99-7bfd-3464-9197-e476b50e0bfe","product":{"name":"OpenShift GitOps","vendor":{"name":"Red Hat"}}},{"id":"65bd17d2-f553-3f20-86e8-90b732bb206f","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"81c8f942-e20c-3187-99ec-d7aa930153a5","product":{"name":"v1.18.2","vendor":{"name":"Red Hat"}}},{"id":"b730527a-f886-3bc3-a574-e375d8655bdf","product":{"name":"v1.16.5","vendor":{"name":"Red Hat"}}},{"id":"c5a42b6b-a759-3493-9fee-02b005f49cbc","product":{"name":"v1.17.3","vendor":{"name":"Red Hat"}}}]}},{"id":"71d873a0-5892-3d84-85bd-1b0814069ac2","advisory":{"id":"RHSA-2025:23203","description":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.2 security update","summary":"Important: Red Hat OpenShift GitOps v1.18.2 security update","datePublished":"Dec 15, 2025, 3:34:36 PM","dateUpdated":"Nov 7, 2026, 10:08:22 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:23203\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23203.json\n","aliases":"CVE-2024-45337\nCVE-2025-13888\nCVE-2025-49844\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"10a17f83-ffcf-3632-903d-1c37e3353569","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64","vendor":{"name":"Red Hat"}}},{"id":"125079db-7232-31a9-a377-69870840f7fc","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64","vendor":{"name":"Red Hat"}}},{"id":"15b4b33a-ae3a-3af2-adbd-dd1d459ad727","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x","vendor":{"name":"Red Hat"}}},{"id":"19af9296-6aa9-3953-9958-8c56fbda6c4a","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x","vendor":{"name":"Red Hat"}}},{"id":"1b223716-1894-37c0-a3c4-69647f5684bd","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x","vendor":{"name":"Red Hat"}}},{"id":"1c2fab51-aa1d-3e35-a681-d7fc5e0f86fc","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x","vendor":{"name":"Red Hat"}}},{"id":"1fdccfd1-720f-3996-afc8-dd1a87c4768a","product":{"name":"Red Hat OpenShift GitOps 1.18","vendor":{"name":"Red Hat"}}},{"id":"25770f2f-df3d-39e2-92f9-1b0cf2b560dc","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64","vendor":{"name":"Red Hat"}}},{"id":"2ab9330c-9061-3b88-8e91-b7811eb7f1a8","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x","vendor":{"name":"Red Hat"}}},{"id":"2ecd6902-3076-3c26-8215-286e98188ea4","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64","vendor":{"name":"Red Hat"}}},{"id":"34c22ef2-cfd1-39c9-a6c4-2e8c9dc88208","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"46b3c98a-0560-309b-a9fa-7747590ef878","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64","vendor":{"name":"Red Hat"}}},{"id":"4926ced3-d870-371a-9224-a338d0d5c276","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64","vendor":{"name":"Red Hat"}}},{"id":"4da36cf5-088e-389a-be9c-0e0b714f83fa","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64","vendor":{"name":"Red Hat"}}},{"id":"5c2f0fbb-db67-3e28-8340-5d28337ec2bf","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64","vendor":{"name":"Red Hat"}}},{"id":"5d85fb68-8f62-346b-9a50-698d77639653","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64","vendor":{"name":"Red Hat"}}},{"id":"723a6e5d-2068-3b06-8bf8-419f629590b7","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"72bfd6d4-6381-32a8-82ae-963db3b6d243","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64","vendor":{"name":"Red Hat"}}},{"id":"76f5a081-cddf-349d-a8c2-ba11d79d9fce","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64","vendor":{"name":"Red Hat"}}},{"id":"7df9af15-9cb4-3a58-8a6a-8470c69a634a","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64","vendor":{"name":"Red Hat"}}},{"id":"83469208-768e-3a55-8be1-88ca493f4fb8","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x","vendor":{"name":"Red Hat"}}},{"id":"84848762-907d-30cd-bbca-c3a17642fe51","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"8f9d1ef5-0540-3ace-9d94-a52a95343af0","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64","vendor":{"name":"Red Hat"}}},{"id":"a15d1d98-afe1-36f0-a8f0-830b942486ab","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64","vendor":{"name":"Red Hat"}}},{"id":"a8be5ca1-3a0d-343a-a456-e98ace1b6491","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"a8ca0c7e-995d-35c6-8d99-ccdf6750029a","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x","vendor":{"name":"Red Hat"}}},{"id":"a91b142e-6c5e-3839-bcf4-b4397df4b3d4","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"b334f59a-6878-31cb-b35e-80996b8efc89","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"bcb10d0e-5a17-3b00-aadd-b85a78c02ee6","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"c4b4280a-e038-3ff8-9df2-7f606aaeb9cf","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64","vendor":{"name":"Red Hat"}}},{"id":"c6046ef8-249f-3a8b-9f1b-7ded4d7d2774","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x","vendor":{"name":"Red Hat"}}},{"id":"cde9d90f-ad5c-3d99-a025-07c72c19a4fd","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"cf74f2c1-dc11-37d5-b995-58476ba610bb","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d244fc4a-ddb2-31c8-80c2-4f17a4b40643","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64","vendor":{"name":"Red Hat"}}},{"id":"daff6b47-cc3e-347f-aadd-21fde950d2f1","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x","vendor":{"name":"Red Hat"}}},{"id":"eb3043e9-bc1c-35b1-bd01-7ccbdc8a9add","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"ed3df39d-7983-3b22-bfb7-56cf6b4d42c8","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64","vendor":{"name":"Red Hat"}}},{"id":"ef34ec38-1919-33ee-b43f-becc867b429b","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x","vendor":{"name":"Red Hat"}}},{"id":"f1bbaef6-04b9-37fe-b940-33153bda2a7a","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64","vendor":{"name":"Red Hat"}}},{"id":"f7577fa1-b08f-30bb-be75-a650a547b7f9","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64","vendor":{"name":"Red Hat"}}},{"id":"fc85aa12-254a-3149-8017-2b91ee95a24f","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64","vendor":{"name":"Red Hat"}}},{"id":"fe895df0-42fa-3593-96bc-70450326fadb","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64","vendor":{"name":"Red Hat"}}}]}},{"id":"fc7941bf-6042-3e37-b575-e8b47474368f","advisory":{"id":"RHSA-2025:23206","description":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.3 security update","summary":"Important: Red Hat OpenShift GitOps v1.17.3 security update","datePublished":"Dec 15, 2025, 3:39:18 PM","dateUpdated":"Nov 7, 2026, 10:08:22 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:23206\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23206.json\n","aliases":"CVE-2024-45337\nCVE-2024-45338\nCVE-2025-13888\nCVE-2025-49844\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"020900ca-ca5b-3434-bf40-d9ba6e4bb4d2","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64","vendor":{"name":"Red Hat"}}},{"id":"1a239770-9a0a-3eb8-ba28-bfd956bf3cc4","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64","vendor":{"name":"Red Hat"}}},{"id":"1c07a580-7669-3185-999e-5ae65c8659cc","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x","vendor":{"name":"Red Hat"}}},{"id":"2a7107f2-6af9-312d-b960-09c8c1a569e9","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64","vendor":{"name":"Red Hat"}}},{"id":"32faaf2d-aee0-3354-bcfb-424ffa742a9d","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64","vendor":{"name":"Red Hat"}}},{"id":"427d403b-da72-3f26-9059-637971c312d5","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"47055d53-2ef2-3d94-b8fd-2313244a1c02","product":{"name":"Red Hat OpenShift GitOps 1.17","vendor":{"name":"Red Hat"}}},{"id":"5464bd57-e5e0-3478-9a3f-385f18d73c37","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x","vendor":{"name":"Red Hat"}}},{"id":"55411ee5-f2b2-34a9-9fdc-fd281b072f20","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64","vendor":{"name":"Red Hat"}}},{"id":"599065b1-2c84-32be-b809-1ec938ced2df","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64","vendor":{"name":"Red Hat"}}},{"id":"5fe47490-3969-3a82-b849-fe8bf8c280fa","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64","vendor":{"name":"Red Hat"}}},{"id":"68623fe3-f2c9-3953-ba9e-52cbf0e51ade","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"6f52a4cd-d659-3158-bf92-7e3fa26a72af","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7155db90-5d9e-3043-879b-685413c52cf1","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x","vendor":{"name":"Red Hat"}}},{"id":"84cb9057-aed5-3c22-b58a-81830407e696","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64","vendor":{"name":"Red Hat"}}},{"id":"85ddd499-c0d7-3ff7-b53e-2fe9dba2cd97","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64","vendor":{"name":"Red Hat"}}},{"id":"8788b87d-8bb7-3bc8-8737-c437f31f21e4","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64","vendor":{"name":"Red Hat"}}},{"id":"88070d0c-68b6-35a3-8851-12159c754788","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64","vendor":{"name":"Red Hat"}}},{"id":"8b830f24-7885-322a-85b7-50564387b839","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64","vendor":{"name":"Red Hat"}}},{"id":"8bd087d6-90c8-321a-912b-5dc0e44e5262","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64","vendor":{"name":"Red Hat"}}},{"id":"960a8719-e34e-337f-ad77-6de3d6cdbb74","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64","vendor":{"name":"Red Hat"}}},{"id":"97cb7926-9287-3bd2-b4d3-ff39a4376669","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"9971554d-88e4-32bd-91ce-e6215dde3bdd","product":{"name":"registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64","vendor":{"name":"Red Hat"}}},{"id":"9bf8dab4-6431-36f7-b374-b31699c6c817","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64","vendor":{"name":"Red Hat"}}},{"id":"9f644976-392b-33a2-b77d-e84c58c7fbb3","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64","vendor":{"name":"Red Hat"}}},{"id":"a0451b6c-6128-3a3e-b68c-d53116f8eaff","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64","vendor":{"name":"Red Hat"}}},{"id":"a21e136d-2de2-3261-9974-e0f68e8a6cf1","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64","vendor":{"name":"Red Hat"}}},{"id":"a535786c-0238-315f-aaf4-1ab869541ee2","product":{"name":"registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x","vendor":{"name":"Red Hat"}}},{"id":"a7dbbb71-c270-32b4-ab97-629059f7330e","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x","vendor":{"name":"Red Hat"}}},{"id":"aee9e8b3-d47d-3ff9-a06d-298547f9b07e","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64","vendor":{"name":"Red Hat"}}},{"id":"c316e4bf-404d-3eea-a679-b6bf34d48e85","product":{"name":"registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"c42fd3bd-4a07-3e10-b8f1-0c9452b40a55","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d62f73e2-e9b7-3cd9-929d-a5e2e05598ba","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d84b4f11-7e99-3b52-8850-c0883c4b1fc9","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"e299ea20-ff1f-3d39-8d38-893707389e35","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"e506b633-614d-37a3-89d6-5decd73335b9","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x","vendor":{"name":"Red Hat"}}},{"id":"e608ed5a-ad46-3c2a-81af-0df67b012c1c","product":{"name":"registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x","vendor":{"name":"Red Hat"}}},{"id":"f3ae214c-f030-344d-8948-35f75ba6920d","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"f3aeabfb-05fc-3d3a-bbe3-9b80882b92fb","product":{"name":"registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x","vendor":{"name":"Red Hat"}}},{"id":"f4e2efbd-45a6-353b-a8ac-e2b954f9d674","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x","vendor":{"name":"Red Hat"}}},{"id":"fa8657b4-6bce-303c-840d-a8c904d499d7","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64","vendor":{"name":"Red Hat"}}},{"id":"fc88378e-6bd0-336b-b76e-4bb04efb855b","product":{"name":"registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x","vendor":{"name":"Red Hat"}}}]}}]}