What is RHSA-2025:3607?

RHSA-2025:3607 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.5.1 release

Which CVE IDs does RHSA-2025:3607 cover?

RHSA-2025:3607 covers the following CVE IDs: CVE-2025-2786, CVE-2025-2842, CVE-2025-30204. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2025:3607?

RHSA-2025:3607 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHSA-2025:3607HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.5.1 release

Vendor

Red Hat Product Security

Published

April 4, 2025

Last Modified

June 3, 2026

🔗 CVE IDs covered (3)

CVE-2025-2786 →CVE-2025-2842 →CVE-2025-30204 →

📋 Description

CVE-2025-2786 — tempo-operator: ServiceAccount Token Exposure Leading to Token and Subject Access Reviews in OpenShift Tempo Operator CVE-2025-2842 — tempo-operator: Tempo Operator Token Exposition lead to read sensitive data CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing

🔗 References (7)

selfhttps://access.redhat.com/errata/RHSA-2025:3607
externalhttps://access.redhat.com/security/cve/CVE-2025-2786
externalhttps://access.redhat.com/security/cve/CVE-2025-2842
externalhttps://access.redhat.com/security/cve/CVE-2025-30204
externalhttps://access.redhat.com/security/updates/classification/
externalhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3607.json