CVE-2024-26147 vulnerabilities

2024-05-1515:48:35

Chainguard

packages.cgr.dev

cve-2024-26147

vulnerabilities

software

packages

multiple

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

8.4%

JSON

Vulnerabilities for packages: kubescape, zarf, trivy, helm-operator, istio-fips, up, flux-source-controller, cert-manager-fips, k8sgpt, istio-operator, istio-operator-fips, flux-helm-controller, helm-push, k9s, cilium-cli, eksctl, chartmuseum, kots, cert-manager, zot

CPENameOperatorVersion
cert-manager-fipsle1.12.8-r0
cert-manager-fipsle1.13.4-r0
cert-manager-fipsle1.14.3-r0
istio-fipsle1.20.3-r2
istio-operator-fipsle1.19.7-r1
cert-managerle1.12.8-r0
cert-managerle1.13.4-r0
cert-managerle1.14.2-r2
chartmuseumle0.16.1-r3
cilium-clile0.15.23-r2

Name	Operator	Version
cert-manager-fips	le	1.12.8-r0
cert-manager-fips	le	1.13.4-r0
cert-manager-fips	le	1.14.3-r0
istio-fips	le	1.20.3-r2
istio-operator-fips	le	1.19.7-r1
cert-manager	le	1.12.8-r0
cert-manager	le	1.13.4-r0
cert-manager	le	1.14.2-r2
chartmuseum	le	0.16.1-r3
cilium-cli	le	0.15.23-r2