Threats Tagged 'cve-2025-27610'

A Local File Inclusion (LFI) vulnerability (CVE-2025-27610) exists in the logging-fluentd-container component of Red Hat OpenShift Logging 5.8.19, specifically in the Rack::Static module. This vulnerability is categorized under CWE-23. Red Hat has issued an important security advisory (RHSA-2025:3448) addressing this issue. Instructions for upgrading OpenShift Container Platform 4.13 and Red Hat OpenShift Logging 5.8 are provided to apply the update. No explicit patch details are given in the advisory content, but upgrade guidance is available. The vulnerability is rated as high severity by the source. There are no known exploits in the wild at this time.

Red Hat Satellite 6.16.4 for RHEL 8 and 9 contains security vulnerabilities including a local file inclusion in rubygem-rack (CVE-2025-27610) and a remote code execution vulnerability in rubygem-graphql (CVE-2025-27407). These vulnerabilities allow an attacker to potentially execute arbitrary code or access unauthorized files. Red Hat has released updated packages to address these issues and advises users to upgrade. The advisory rates the impact as Important (high severity).

Red Hat Satellite 6.14.4.5 for RHEL 8 contains two security vulnerabilities: a remote code execution issue in rubygem-graphql (CVE-2025-27407) and a local file inclusion vulnerability in rubygem-rack (CVE-2025-27610). These vulnerabilities could allow attackers to execute arbitrary code or access local files improperly. Red Hat has released updated packages to address these issues and advises users to upgrade to these fixed versions.