CVE-2021-4125

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift...

8.1 High

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.52%Up 0.5 points since Aug 25, 2022

What each source reports

NVD Score used 8.1

Record: CVE-2021-4125
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-20, CWE-502
Updated: 2026-11-02

CVE List No score

Record: CVE-2021-4125
Weakness: CWE-20
Updated: 2026-11-02

EUVDEUVD-2021-33999 No score

Record: EUVD-2021-33999
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jr7q-cc2x-97vj 8.1

It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift...

Record: GHSA-jr7q-cc2x-97vj
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-502
Updated: 2026-11-02

Affected products

redhat openshift

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-4125 is a high vulnerability (CVSS 8.1) in Redhat Openshift, published August 24, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. No source names a fixed version.