CVE-2024-12698

Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)

Description

An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.

Remediation

Workaround:

  • Red Hat Product Security does not have any mitigation recommendations at this time. Please update as soon as possible.

Category

6.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.07%
Vendor Advisory redhat.com
Affected: Red Hat Red Hat OpenShift Container Platform 4.18
Published at:
Updated at:

References

Link Tags
https://access.redhat.com/errata/RHSA-2024:6122 vendor advisory
https://access.redhat.com/security/cve/CVE-2024-12698 vdb entry
https://bugzilla.redhat.com/show_bug.cgi?id=2332674 issue tracking

Frequently Asked Questions

What is the severity of CVE-2024-12698?
CVE-2024-12698 has been scored as a medium severity vulnerability.
How to fix CVE-2024-12698?
As a workaround for remediating CVE-2024-12698: Red Hat Product Security does not have any mitigation recommendations at this time. Please update as soon as possible.
Is CVE-2024-12698 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-12698 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-12698?
CVE-2024-12698 affects Red Hat Red Hat OpenShift Container Platform 4.18.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.