Lucene search

K
nvd[email protected]NVD:CVE-2023-1065
HistoryFeb 28, 2023 - 7:15 p.m.

CVE-2023-1065

2023-02-2819:15:16
CWE-287
web.nvd.nist.gov
1
snyk
kubernetes
monitor
vulnerability
obfuscate
security issues

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

39.5%

This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploit the vulnerability the attacker does not need to be authenticated to Snyk but does need to know the target’s Integration ID (which may or may not be the same as the Organization ID, although this is an unpredictable UUID in either case).

Affected configurations

Nvd
Node
snykkubernetes_monitorRange<2.0.0
VendorProductVersionCPE
snykkubernetes_monitor*cpe:2.3:a:snyk:kubernetes_monitor:*:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

39.5%

Related for NVD:CVE-2023-1065