Lucene search

K
cgrChainguardCHAINGUARD:CVE-2023-39325
HistoryMay 14, 2024 - 9:06 a.m.

CVE-2023-39325 vulnerabilities

2024-05-1409:06:56
Chainguard
packages.cgr.dev
2752
cve-2023-39325
vulnerabilities
packages
prometheus-elasticsearch-exporter-fips
haproxy-ingress
aws-ebs-csi-driver-1.18
seldon-core-operator-1.16
cert-manager-fips-1.13
aws-efs-csi-driver
kubernetes-1.20
oauth2-proxy
cloud-sql-proxy
prometheus-mysqld-exporter
kubernetes-dns-node-cache
prometheus-redis-exporter-fips-1.44
consul
vault-1.14
kubeflow-katib
cluster-autoscaler-1.26
prometheus-node-exporter
gomplate
dex
helm
secrets-store-csi-driver
kubernetes-1.23
thanos-0.31
aws-load-balancer-controller
nats
prometheus-pushgateway
wavefront-collector-for-kubernetes-1.12
pulumi-kubernetes-operator
kube-state-metrics
pulumi
caddy
karpenter-0.23
pulumi-language-java
gitlab-shell
prometheus-blackbox-exporter
kubernetes-1.22
aws-load-balancer-controller-fips
wavefront-collector-for-kubernetes-1.13
vault-k8s
gitlab-runner
prometheus-alertmanager
terraform

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

59.0%

Vulnerabilities for packages: helm, buildkitd, kube-fluentd-operator, sigstore-scaffolding, calico-fips, gitness, vault-csi-provider, yq, azure-aad-pod-identity-mic, falcoctl-fips, pulumi, mc, rqlite, kubernetes-dashboard, vertical-pod-autoscaler, kaf, kubernetes-csi-external-attacher, k3d, nodetaint, flux-kustomize-controller, gomplate, aws-efs-csi-driver, oauth2-proxy, flux-kustomize-controller-0.37, kubernetes-csi-external-attacher-fips, prometheus-operator, prometheus-statsd-exporter-fips, kubeflow-katib, grpcurl, bank-vaults, k8sgpt-operator, spark-operator, kube-state-metrics, hugo, gitlab-runner, flux-notification-controller-0.37, kubernetes-csi-external-snapshotter, kyverno, bank-vaults-fips, argo-cd, kubernetes-dns-node-cache, prometheus-node-exporter, gitlab-pages, metacontroller, kubernetes-csi-node-driver-registrar-fips, flux-helm-controller, falco, vault-k8s, gke-gcloud-auth-plugin, kubernetes-csi-external-resizer, eks-distro-coredns, kubernetes-ingress-defaultbackend, nfs-subdir-external-provisioner, runc, atlantis-fips, aws-load-balancer-controller, aws-efs-csi-driver-fips, prometheus-fips, crossplane-provider-aws, secrets-store-csi-driver, git-lfs, up, prometheus-blackbox-exporter, external-dns, kots, karpenter, prometheus, weaviate, hey, prometheus-node-exporter-fips, kubernetes-csi-node-driver-registrar, prometheus-pushgateway, coredns, prometheus-elasticsearch-exporter-fips, haproxy-ingress, external-dns-fips, trillian, kube-logging-operator, cert-manager-fips, cosign, dive, cloud-sql-proxy, pulumi-kubernetes-operator, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-agent, cluster-autoscaler-fips, nfs-subdir-external-provisioner-fips, kubevela, k3s, aws-ebs-csi-driver, kyverno-policy-reporter-ui, caddy, smarter-device-manager-fips, dynamic-localpv-provisioner, metrics-server-fips, prometheus-redis-exporter-fips, flux-source-controller, nats, node-problem-detector, containerd, istio-cni, influxd, crossplane-provider-azure, kubernetes-csi-livenessprobe, k8sgpt, dex-k8s-authenticator, apko, prometheus-stackdriver-exporter, go, flux, flux-notification-controller, kube-logging-logging-operator, falcoctl, opentofu, py3-seldon-core, frp, cue, thanos, external-secrets, nvidia-device-plugin, wireguard-go, kube-state-metrics-fips, kubernetes, kpt, wavefront-collector-for-kubernetes, pulumi-language-yaml, atlantis, aws-load-balancer-controller-fips, prometheus-alertmanager, src, tekton-chains, stakater-reloader, secrets-store-csi-driver-provider-gcp, kubernetes-dashboard-metrics-scraper, prometheus-postgres-exporter-fips, keda, vault-k8s-fips, memcached-exporter, kubernetes-csi-external-provisioner, volume-modifier-for-k8s-fips, amass, nri-prometheus, cluster-autoscaler, gitlab-shell, kind, dynamic-localpv-provisioner-fips, pulumi-language-java, tctl, kyverno-policy-reporter-kyverno-plugin, gatekeeper, external-secrets-operator, kubernetes-csi-livenessprobe-fips, kiam, pulumi-language-dotnet, kyverno-policy-reporter, ollama, skaffold, dgraph, zot, telegraf, kubernetes-csi-external-resizer-fips, gobuster, kube-oidc-proxy, newrelic-infrastructure-agent, terraform, trust-manager, prometheus-mongodb-exporter-fips, bom, thanos-operator, metrics-server, kubewatch, prometheus-adapter, prometheus-bind-exporter, istio-pilot-discovery, flux-image-automation-controller, slsa-verifier, timoni, prometheus-pushgateway-fips, fuse-overlayfs-snapshotter, flux-source-controller-0.37, vault, flux-image-reflector-controller, aactl, chartmuseum, dex, minio, consul, configmap-reload-fips, seldon-core-operator, prometheus-elasticsearch-exporter, prometheus-adapter-fips, kubescape, flux-helm-controller-0.37, istio-operator, grafana, tkn, prometheus-postgres-exporter, prometheus-mongodb-exporter

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

59.0%