CVE-2022-3841

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.

• CWE-918
• CWE-918

• https://access.redhat.com/security/cve/CVE-2022-3841Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2022-3841Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38404Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earl…7.8
• CVE-2022-38405Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earl…7.8
• CVE-2022-38406Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earl…5.5
• CVE-2022-38407Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earl…5.5
• CVE-2022-38408Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (an…7.8
• CVE-2022-38409Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (an…5.5
• CVE-2022-38410Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (an…5.5
• CVE-2022-38411Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and …7.8
• CVE-2022-38412Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and …7.8
• CVE-2022-38413Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and e…7.8
• CVE-2022-38414Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and e…7.8
• CVE-2022-38415Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and e…7.8