Lucene search

K
cgrChainguardCHAINGUARD:CVE-2023-48795
HistoryMay 14, 2024 - 3:06 a.m.

CVE-2023-48795 vulnerabilities

2024-05-1403:06:55
Chainguard
packages.cgr.dev
116
vulnerabilities
packages
cve-2023-48795

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.962 High

EPSS

Percentile

99.5%

Vulnerabilities for packages: gitsign, kaf, fq, influxd, slsa-verifier, scorecard, spire-server, local-path-provisioner, istio-operator-fips, frp, grafana, istio-pilot-agent-fips, amass, dynamic-localpv-provisioner, nfs-subdir-external-provisioner, thanos, metrics-server-fips, falco, prometheus-node-exporter, terragrunt, keda, buf, istio-pilot-agent, nri-kafka, hugo, kubernetes-dashboard, traefik, nerdctl, gatekeeper-fips, temporal-fips, sigstore-scaffolding-fips, kube-fluentd-operator, cosign, external-dns-fips, karpenter, flux-notification-controller-2.0, argo-cd, gitlab-pages, kubewatch, prometheus-statsd-exporter, src-fingerprint, terraform-fips, rqlite, bank-vaults-fips, kubernetes-fips, temporal-ui-server-fips, zot, crossplane-provider-aws, dgraph, prometheus-nats-exporter, flux, tekton-pipelines, external-dns, seldon-core-operator, nri-mssql, go-licenses, kubernetes-event-exporter, flux-source-controller, cluster-autoscaler, flux-helm-controller, docker-credential-acr-env, calico-fips, dockerize-fips, calico, cortex, mongo-tools, melange, secrets-store-csi-driver, prometheus-elasticsearch-exporter-fips, wireguard-go, kube-state-metrics-fips, certificate-transparency-fips, fulcio, flux-notification-controller-0.37, gitlab-runner, vault, prometheus-pushgateway, cosign-fips, vault-csi-provider, k3s, step, prometheus-postgres-exporter, flux-source-controller-0.37, flux-notification-controller, caddy, cloudflared, terraform-provider-aws, kube-oidc-proxy, kubescape, certificate-transparency, kubeflow-katib, rekor, flux-kustomize-controller, prometheus-mongodb-exporter-fips, temporal-ui-server, prometheus-bind-exporter, temporal, bom, istio-pilot-discovery-fips, prometheus-fips, timestamp-authority-fips, gitlab-shell, actions-runner-controller, istio-cni-fips, gatekeeper, cert-manager, ko-fips, flux-source-controller-2.0, fulcio-fips, prometheus-node-exporter-fips, sops, trivy, nats-server, tigera-operator, atlantis, ko, flux-kustomize-controller-2.0, kube-state-metrics, kots, falcoctl-fips, containerd, haproxy-ingress, opentofu, cfssl, kubernetes, kyverno, libssh2, tekton-chains, cloud-sql-proxy, ollama, prometheus-postgres-exporter-fips, external-secrets-operator, cluster-autoscaler-fips, flux-helm-controller-2.0, aactl, dockerize, crossplane-provider-azure, kube-rbac-proxy, prometheus-pushgateway-fips, prometheus-blackbox-exporter, atlantis-fips, azure-aad-pod-identity-mic, step-ca, vault-k8s-fips, nsc, helm, spark-operator, telegraf, temporal-server, trillian, coredns, buildkitd, istio-cni, git-lfs, ferretdb, flux-image-automation-controller, terraform-docs, flux-image-reflector-controller, py3-seldon-core, nats, pulumi, tigera-operator-fips, consul, oauth2-proxy, secrets-store-csi-driver-provider-azure, prometheus-adapter-fips, external-secrets, kube-logging-logging-operator, prometheus-mongodb-exporter, grype, skopeo, nfs-subdir-external-provisioner-fips, conftest, rekor-fips, dex-k8s-authenticator, cadvisor, gomplate, memcached-exporter, vault-k8s, gobuster, cert-manager-fips, spire-server-fips, gpu-operator, gitness, kubernetes-dns-node-cache, temporal-server-fips, boring-registry, dex, kyverno-policy-reporter, istio-operator, kubeflow-pipelines, tkn, kiam, cilium-cli, apko, prometheus-stackdriver-exporter, prometheus-statsd-exporter-fips, crossplane, metrics-server, bank-vaults, terraform-provider-azurerm, loki, eks-distro-coredns, istio-pilot-discovery, argo-workflows, vault-fips, k3d, node-problem-detector, trillian-fips, wavefront-collector-for-kubernetes, gitlab-kas, prometheus-mysqld-exporter, flux-helm-controller-0.37, grpc-health-probe, weaviate, cloud-sql-proxy-fips, libssh, falcoctl, conftest-fips, prometheus, helm-push, prometheus-adapter, flux-kustomize-controller-0.37, src, sigstore-scaffolding, dynamic-localpv-provisioner-fips, prometheus-alertmanager, up, eksctl, terraform

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.962 High

EPSS

Percentile

99.5%