Azure Automation State Configuration, DSC Extension Security Vulnerabilities

The Take Command Summit: A Stacked Agenda, and Killer Guest Speakers Coming Your Way May 21

By now you should have heard about Take Command, Rapid7’s day-long virtual summit on May 21 bringing together some of the best minds in the cybersecurity sphere for comprehensive discussions on the latest data, challenges, and opportunities in the industry. It’s an opportunity to expand your...

CVE-2024-32114

In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and the Message REST API are located). It means that anyone can use these layers without any required authentication. Potentially, anyone can interact with the broker (using Jolokia....

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: step-ca, terraform-provider-google, sonobuoy, eksctl, guac, flux-image-reflector-controller, caddy, dynamic-localpv-provisioner, nerdctl, aactl, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, kaniko, node-problem-detector-0.8, keda,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, calico-fips-3.25, falco, grafana, nri-prometheus, rabbitmq-cluster-operator, terraform-provider-aws,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: py3-seldon-core-1.16, gke-gcloud-auth-plugin, kube-state-metrics-2.6, dynamic-localpv-provisioner-fips, seldon-core-operator-1.16, dynamic-localpv-provisioner, grpcurl, wireguard-go, go-1.20, restic, kyverno-1.8, hey, falco, go-1.19, k3d,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: py3-seldon-core-1.16, kube-state-metrics-2.6, dynamic-localpv-provisioner-fips, seldon-core-operator-1.16, dynamic-localpv-provisioner, gitleaks, hey, vt-cli, grpcurl, k3d,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: py3-seldon-core-1.16, gke-gcloud-auth-plugin, kube-state-metrics-2.6, dynamic-localpv-provisioner-fips, seldon-core-operator-1.16, dynamic-localpv-provisioner, grpcurl, wireguard-go, go-1.20, restic, kyverno-1.8, hey, falco, go-1.19, k3d,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, aws-load-balancer-controller-2.4.5, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-attacher-4.3, prometheus-node-exporter-fips, volume-modifier-for-k8s-fips, keda-2.9, kubernetes-dns-node-cache-1.17,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, aws-load-balancer-controller-2.4.5, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-attacher-4.3, volume-modifier-for-k8s-fips, cluster-autoscaler-1.26, nfs-subdir-external-provisioner-fips, gatekeeper-fips-3.14, nri-prometheus,.....

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, opentelemetry-collector-contrib, gatekeeper-fips-3.14, nri-prometheus, crossplane-provider-azure, falco, rabbitmq-cluster-operator, gitlab-logger, k8sgpt-operator, kubernetes-csi-livenessprobe-fips, falcosidekick,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: guac, nri-cassandra, nuclei, vault-k8s, k3d, boring-registry, external-dns, thanos, nri-haproxy, grafana-10.4, pulumi-language-dotnet, stern, conftest, flux, tigera-operator-1.33, cloud-sql-proxy, gitlab-runner, nri-elasticsearch, spicedb, policy-controller,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, calico-fips-3.25, falco, grafana, nri-prometheus, rabbitmq-cluster-operator, terraform-provider-aws,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, dynamic-localpv-provisioner, aactl, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, node-problem-detector-0.8, vault-1.13, dex, spark-operator, k3d, cluster-autoscaler-1.27, hugo, prometheus-operator, external-dns, chartmuseum,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: step-ca, terraform-provider-google, sonobuoy, eksctl, guac, flux-image-reflector-controller, caddy, dynamic-localpv-provisioner, nerdctl, aactl, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, kaniko, node-problem-detector-0.8, keda,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: py3-seldon-core-1.16, kube-state-metrics-2.6, dynamic-localpv-provisioner-fips, seldon-core-operator-1.16, dynamic-localpv-provisioner, wireguard-go, hey, grpcurl, k3d,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

GHSA-R48Q-9G5R-8Q2H vulnerabilities

Vulnerabilities for packages: py3-seldon-core-1.16, kube-state-metrics-2.6,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery-1.19, step-ca, eksctl, telegraf-1.29, flux-image-reflector-controller, step, caddy, dynamic-localpv-provisioner, nerdctl, aactl, gatekeeper-3.12, istio-cni-1.19, pulumi, vault-k8s, node-problem-detector-0.8, kubernetes-1.29, vault-1.13, dex,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, opentelemetry-collector-contrib, gatekeeper-fips-3.14, nri-prometheus, crossplane-provider-azure, falco, rabbitmq-cluster-operator, gitlab-logger, k8sgpt-operator, kubernetes-csi-livenessprobe-fips, falcosidekick,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery-1.19, kind, flux-image-reflector-controller, caddy, dynamic-localpv-provisioner, kubernetes-ingress-defaultbackend, aactl, gatekeeper-3.12, istio-cni-1.19, pulumi, vault-k8s, grpcurl, node-problem-detector-0.8, keda, vault-1.13, dex,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, flux-helm-controller-2.0, gatekeeper-fips-3.14, dagger, flux-kustomize-controller-2.0, crossplane-provider-azure, nri-prometheus, falco, rabbitmq-cluster-operator, gitlab-logger,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: terraform-provider-google, apko, keda-2.11, flux, falco, flux-notification-controller, aactl, sops, gitness, pulumi, tkn, kaniko, crossplane-provider-aws, vault-1.13, zarf, terragrunt, cosign, actions-runner-controller, zot, policy-controller, scorecard, crossplane,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

GHSA-7RG2-CXVP-9P7P vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips-1.4, kube-state-metrics-2.6,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: guac, nri-cassandra, nuclei, vault-k8s, k3d, boring-registry, external-dns, thanos, nri-haproxy, grafana-10.4, pulumi-language-dotnet, stern, conftest, flux, tigera-operator-1.33, cloud-sql-proxy, gitlab-runner, nri-elasticsearch, spicedb, policy-controller,...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, kubernetes-csi-external-snapshotter-6.0, dynamic-localpv-provisioner, thanos-operator, kube-state-metrics-2.2.0,...

CVE-2022-32149 vulnerabilities

Vulnerabilities for packages: py3-seldon-core-1.16, kube-state-metrics-2.6, dynamic-localpv-provisioner-fips, seldon-core-operator-1.16, dynamic-localpv-provisioner, gitleaks, hey, vt-cli, grpcurl, k3d,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery-1.19, kind, flux-image-reflector-controller, caddy, dynamic-localpv-provisioner, kubernetes-ingress-defaultbackend, aactl, gatekeeper-3.12, istio-cni-1.19, pulumi, vault-k8s, grpcurl, node-problem-detector-0.8, keda, vault-1.13, dex,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, dynamic-localpv-provisioner, aactl, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, node-problem-detector-0.8, vault-1.13, dex, spark-operator, k3d, cluster-autoscaler-1.27, hugo, prometheus-operator, external-dns, chartmuseum,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery-1.19, step-ca, eksctl, telegraf-1.29, flux-image-reflector-controller, step, caddy, dynamic-localpv-provisioner, nerdctl, aactl, gatekeeper-3.12, istio-cni-1.19, pulumi, vault-k8s, node-problem-detector-0.8, kubernetes-1.29, vault-1.13, dex,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, aws-load-balancer-controller-2.4.5, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-attacher-4.3, prometheus-node-exporter-fips, volume-modifier-for-k8s-fips, keda-2.9, kubernetes-dns-node-cache-1.17,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-1.4, prometheus-node-exporter-fips, loki, step, cluster-autoscaler-1.26, keda-2.9, kubernetes-dns-node-cache-1.17, flux-helm-controller-2.0, gatekeeper-fips-3.14, keda-2.8, flux-kustomize-controller-2.0, nfs-subdir-external-provisioner-fips,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-1.4, prometheus-node-exporter-fips, loki, step, cluster-autoscaler-1.26, keda-2.9, kubernetes-dns-node-cache-1.17, flux-helm-controller-2.0, gatekeeper-fips-3.14, keda-2.8, flux-kustomize-controller-2.0, nfs-subdir-external-provisioner-fips,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, aws-load-balancer-controller-2.4.5, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-attacher-4.3, prometheus-node-exporter-fips, volume-modifier-for-k8s-fips, keda-2.9, kubernetes-dns-node-cache-1.17,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: mage, kind, newrelic-prometheus-configurator, eksctl, sonobuoy, flux-image-reflector-controller, nri-cassandra, caddy, dynamic-localpv-provisioner, nerdctl, oras, nuclei, gatekeeper-3.12, pulumi, vault-k8s, grpcurl, gh, ip-masq-agent, wazero, lazygit,...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, kubernetes-csi-external-snapshotter-6.0, dynamic-localpv-provisioner, thanos-operator, kube-state-metrics-2.2.0,...