RHSA-2022:0448HighCVSS 8.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update on RHEL 8

Published
February 7, 2022
Last Modified
May 28, 2026

🔗 CVE IDs covered (5)

CVE-2021-3859 →CVE-2021-4104 →CVE-2022-23302 →CVE-2022-23305 →CVE-2022-23307 →

📋 Description

CVE-2021-3859 — undertow: client side invocation timeout raised when calling over HTTP2 CVE-2021-4104 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender CVE-2022-23302 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink CVE-2022-23305 — log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender CVE-2022-23307 — log4j: Unsafe deserialization flaw in Chainsaw log viewer

🔗 References (10)