StackRadar

CVE-2023-3899

High

Advisory

Published 16 Sept 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
29
of 17,781 indexed, latest versions
Container images
34
deployed by those charts
Fix available
1 of 1
affected package

Red Hat Security Advisory: subscription-manager security update

Carried by container images the latest versions of 29 of 17,781 indexed charts deploy, on 34 images.

Affected packageAffected versionsFixed inImages
subscription-managerrpm1.21.10-3.el7_6, 1.24.13-3.el7_7, 1.25.17-1.el8, 1.26.17-1.el8_2+11 more0:1.24.52-2.el7_9, 0:1.25.17.1-2.el8_1, 0:1.26.22-2.el8_2, 0:1.28.13-7.el8_4+2 more34
OSV records
RHSA-2023:4702RHSA-2023:4703RHSA-2023:4704RHSA-2023:4705RHSA-2023:4706RHSA-2023:4701

Charts affected

29 by stars
ChartLatestAffected imagesRadar Score
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
subscription-manager@1.26.22-2.el8_2
0:1.28.36-3.el8_8

Open the chart page →

9,052
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
subscription-manager@1.28.29.1-2.el8_6
0:1.28.36-3.el8_8

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
subscription-manager@1.28.29.1-2.el8_6
0:1.28.36-3.el8_8

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
subscription-manager@1.28.29.1-2.el8_6
0:1.28.36-3.el8_8

Open the chart page →

13,874
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
subscription-manager@1.28.13-4.el8_4
0:1.28.13-7.el8_4

Open the chart page →

107,811
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
subscription-manager@1.28.13-2.el8
0:1.28.13-7.el8_4

Open the chart page →

31,510
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
subscription-manager@1.28.29-3.el8
0:1.28.29.1-2.el8_6

Open the chart page →

11,459
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
subscription-manager@1.28.36-2.el8
0:1.28.36-3.el8_8

Open the chart page →

25,151
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
subscription-manager@1.26.20-1.el8_2
0:1.26.22-2.el8_2

Open the chart page →

25,456
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4

Open the chart page →

89,959
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
subscription-manager@1.21.10-3.el7_6
0:1.24.52-2.el7_9
ibmcom/app-nav-ui:1.0.1e2a86997b36b
subscription-manager@1.21.10-3.el7_6
0:1.24.52-2.el7_9

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.05 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

5 of the 6 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9

Open the chart page →

39,349
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9

Open the chart page →

4,505
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
subscription-manager@1.25.17-1.el8
0:1.25.17.1-2.el8_1

Open the chart page →

9,854
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
subscription-manager@1.26.17-1.el8_2
0:1.26.22-2.el8_2

Open the chart page →

12,856
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
subscription-manager@1.28.13-2.el8
0:1.28.13-7.el8_4

Open the chart page →

18,023
orion-ldopenshift1.0.31 of 2See more

orion-ld openshift 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
subscription-manager@1.28.13-4.el8_4
0:1.28.36-3.el8_8

Open the chart page →

14,727
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
subscription-manager@1.28.13-6.el8_4
0:1.28.13-7.el8_4

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
subscription-manager@1.28.13-6.el8_4
0:1.28.13-7.el8_4

Open the chart page →

15,466
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
subscription-manager@1.25.17-1.el8
0:1.25.17.1-2.el8_1

Open the chart page →

11,151
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
subscription-manager@1.27.18-1.el8_3
0:1.28.36-3.el8_8

Open the chart page →

12,248
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
subscription-manager@1.28.13-6.el8_4
0:1.28.13-7.el8_4

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
subscription-manager@1.28.13-6.el8_4
0:1.28.13-7.el8_4

Open the chart page →

15,291
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
subscription-manager@1.26.21-1.el8_2
0:1.26.22-2.el8_2

Open the chart page →

11,437
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
subscription-manager@1.28.29.1-2.el8_6
0:1.28.36-3.el8_8

Open the chart page →

16,047
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4

Open the chart page →

29,227
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
subscription-manager@1.28.13-4.el8_4
0:1.28.13-7.el8_4

Open the chart page →

21,997
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-3899.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4

Open the chart page →

28,165

Container images carrying it

34 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
subscription-manager@1.28.29.1-2.el8_6
0:1.28.36-3.el8_8
3
quay.io/openshift/origin-cli:4.7464a3af4dfe0
subscription-manager@1.28.13-6.el8_4
0:1.28.13-7.el8_4
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
subscription-manager@1.28.13-6.el8_4
0:1.28.13-7.el8_4
2
anchore/anchore-engine:v0.10.0bde9eedf639d
subscription-manager@1.28.13-2.el8
0:1.28.13-7.el8_4
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
subscription-manager@1.25.17-1.el8
0:1.25.17.1-2.el8_1
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
subscription-manager@1.21.10-3.el7_6
0:1.24.52-2.el7_9
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
subscription-manager@1.21.10-3.el7_6
0:1.24.52-2.el7_9
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
subscription-manager@1.27.18-1.el8_3
0:1.28.36-3.el8_8
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
subscription-manager@1.24.13-3.el7_7
0:1.24.52-2.el7_9
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
subscription-manager@1.25.17-1.el8
0:1.25.17.1-2.el8_1
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
subscription-manager@1.28.13-4.el8_4
0:1.28.13-7.el8_4
1
splunk/splunk-operator:2.0.0c4e0d3146226
subscription-manager@1.28.29-3.el8
0:1.28.29.1-2.el8_6
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
subscription-manager@1.26.17-1.el8_2
0:1.26.22-2.el8_2
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
subscription-manager@1.28.36-2.el8
0:1.28.36-3.el8_8
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
subscription-manager@1.28.13-4.el8_4
0:1.28.36-3.el8_8
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
subscription-manager@1.26.20-1.el8_2
0:1.26.22-2.el8_2
1
quay.io/openshift/origin-cli:4.66722d5041b47
subscription-manager@1.26.21-1.el8_2
0:1.26.22-2.el8_2
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
subscription-manager@1.26.22-2.el8_2
0:1.28.36-3.el8_8
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
subscription-manager@1.28.29.1-2.el8_6
0:1.28.36-3.el8_8
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
subscription-manager@1.28.13-4.el8_4
0:1.28.13-7.el8_4
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
subscription-manager@1.28.13-3.el8_4
0:1.28.13-7.el8_4
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
subscription-manager@1.28.13-2.el8
0:1.28.13-7.el8_4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.