← Retour
CGA-vgfm-4x3c-36fm
CGA-vgfm-4x3c-36fm
Résumé IA snake-internal / snake-template-v1
Une faille nommée CGA-vgfm-4x3c-36fm a été découverte dans le produit concerné.
Gravité : Info. Faible gravité ou non encore évaluée.
Ce que vous pouvez faire : mettez à jour le logiciel concerné. En cas de doute, contactez votre service informatique ou recherchez "le produit CGA-vgfm-4x3c-36fm" sur le site de l'éditeur.
CGA-vgfm-4x3c-36fm (le produit concerné). Gravité : Info.
Plan de réponse :
1. Vérifier l'avis de l'éditeur (versions affectées, version corrigée).
2. Si une version vulnérable tourne en production, planifier l'intervention (urgence selon KEV/CVSS).
3. Sans correctif disponible, mitiger via règle WAF, désactivation de la fonctionnalité, etc.
4. Surveiller les logs / SIEM pour les IOC et signatures de PoC connus.
PoC et correctifs : voir la section « Références », MITRE et NVD.
❓ Quel est le problème
Une faille (CGA-vgfm-4x3c-36fm) dans le produit concerné. Une faille logicielle sérieuse a été identifiée.
📍 Périmètre concerné
Versions ciblées de le produit concerné (voir l'avis éditeur). Si en production, identifiez l'exposition immédiatement.
🔥 Gravité
Gravité : Info. Faible gravité ou non encore évaluée.
🔧 Comment corriger
Appliquez la version corrigée indiquée dans l'avis éditeur.
🛡️ Contournement
Si aucun correctif n'est disponible, désactivez la fonctionnalité concernée, appliquez des règles WAF, bloquez via ACL réseau ou isolez la version vulnérable.
🔍 Détection
Vérifiez les versions, analysez les dépendances via SBOM, et surveillez le SIEM pour les IOC et signatures de PoC associés.
Paquets affectés
Chainguard
apache-hop
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r9"}]}]
Chainguard
apache-nifi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r3"}]}]
Chainguard
apache-pulsar-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]
Chainguard
apache-pulsar-4.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}]
Chainguard
commercial-elasticsearch-8.19
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.15-r0"}]}]
Chainguard
druid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r15"}]}]
Chainguard
elasticsearch-7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r12"}]}]
Chainguard
elasticsearch-7-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r12"}]}]
Chainguard
elasticsearch-8.17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r21"}]}]
Chainguard
elasticsearch-8.19
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r2"}]}]
Chainguard
elasticsearch-8.19-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r2"}]}]
Chainguard
elasticsearch-9.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r10"}]}]
Chainguard
elasticsearch-9.0-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r10"}]}]
Chainguard
elasticsearch-9.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r4"}]}]
Chainguard
elasticsearch-9.1-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r4"}]}]
Chainguard
elasticsearch-9.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r2"}]}]
Chainguard
elasticsearch-9.2-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r2"}]}]
Chainguard
elasticsearch-9.3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.3-r2"}]}]
Chainguard
elasticsearch-9.3-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.3-r2"}]}]
Chainguard
geoserver-2.27
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.5-r5"}]}]
Chainguard
geoserver-2.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-r3"}]}]
Chainguard
ghidra
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4-r2"}]}]
Chainguard
gradle-8
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-r4"}]}]
Chainguard
gradle-9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.1-r2"}]}]
Chainguard
jenkins-2-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Chainguard
jenkins-2-openjdk-25
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Chainguard
kayenta-2025.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.3-r7"}]}]
Chainguard
kayenta-2026.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.0.2-r7"}]}]
Chainguard
kayenta-fips-2025.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.3-r8"}]}]
Chainguard
kayenta-fips-2026.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.0.2-r8"}]}]
Chainguard
kserve-modelmesh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r31"}]}]
Chainguard
spark-4.0-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r11"}]}]
Chainguard
wildfly-openjdk-17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Chainguard
wildfly-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Wolfi
apache-nifi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r3"}]}]
Wolfi
apache-pulsar-4.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}]
Wolfi
druid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r15"}]}]
Wolfi
gradle-8
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-r4"}]}]
Wolfi
gradle-9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.1-r2"}]}]
Wolfi
jenkins-2-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Wolfi
jenkins-2-openjdk-25
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Wolfi
kserve-modelmesh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r31"}]}]
Wolfi
spark-4.0-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r11"}]}]
Wolfi
wildfly-openjdk-17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Wolfi
wildfly-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Chainguard
keycloak-26.6
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Chainguard
keycloak-26.6-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Chainguard
opensearch-2-security
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r14"}]}]
Wolfi
keycloak-26.6
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Wolfi
keycloak-26.6-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Wolfi
opensearch-2-security
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r14"}]}]
Chainguard
jruby-10.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0.0-r1"}]}]
Chainguard
jruby-9.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.14.0-r5"}]}]
Chainguard
ruby3.2-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r8"}]}]
Chainguard
ruby3.3-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r6"}]}]
Chainguard
ruby3.4-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r7"}]}]
Chainguard
ruby4.0-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r3"}]}]
Wolfi
jruby-10.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0.0-r1"}]}]
Wolfi
jruby-9.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.14.0-r5"}]}]
Wolfi
ruby3.2-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r8"}]}]
Wolfi
ruby3.3-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r6"}]}]
Wolfi
ruby3.4-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r7"}]}]
Wolfi
ruby4.0-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r3"}]}]
Chainguard
wso2is
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.0-r0"}]}]
Chainguard
commercial-elasticsearch-9.3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.5-r0"}]}]
Chainguard
jenkins-2.555
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r3"}]}]
Chainguard
jenkins-2.555-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r3"}]}]
Chainguard
jenkins-2.555-openjdk-25
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r3"}]}]
Chainguard
thingsboard-tb-mqtt-transport
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]
Chainguard
thingsboard-tb-node
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]
Wolfi
thingsboard-tb-mqtt-transport
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]
Wolfi
thingsboard-tb-node
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]