BIG-IP, Enterprise Manager Security Vulnerabilities

Analysis of user password strength

The processing power of computers keeps growing, helping users to solve increasingly complex problems faster. A side effect is that passwords that were impossible to guess just a few years ago can be cracked by hackers within mere seconds in 2024. For example, the RTX 4090 GPU is capable of...

The Annual SaaS Security Report: 2025 CISO Plans and Priorities

Seventy percent of enterprises are prioritizing investment in SaaS security by establishing dedicated teams to secure SaaS applications, as part of a growing trend of maturity in this field of cybersecurity, according to a new survey released this month by the Cloud Security Alliance (CSA)....

CVE-2024-5953

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their...

Security Bulletin: Vulnerabilities in JAR files affect Transparent Cloud Tiering in IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in multiple JAR files affect Transparent Cloud Tiering in IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products. The vulnerabilities are not thought to be exploitable but IBM recommends upgrade for users of Transparent Cloud Tiering...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, bank-vaults, frp, ingress-nginx-controller, crossplane-provider-gcp, kor, nfs-subdir-external-provisioner, tekton-chains, metrics-server, cri-tools, terragrunt, aws-efs-csi-driver, goreleaser, hubble-ui, hubble, cass-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, docker-credential-ecr-login, delve, go-bindata, wait-for-port, nri-redis, dockerize, esbuild, ingress-nginx-controller, kor, mongo-tools, nfs-subdir-external-provisioner, metrics-server, cri-tools, aws-efs-csi-driver, goreleaser,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spark-operator, local-static-provisioner, kubernetes, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, calico, ip-masq-agent, nodetaint, aws-ebs-csi-driver,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: tekton-pipelines, cert-manager, skaffold, helm-push, neuvector-agent, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent, k3d, kubescape, melange, grype, up, zot, eksctl, flux-source-controller, kubevela, ctop, flux-helm-controller, kaniko, trivy, kots,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: helm-operator, eksctl, chartmuseum, flux-helm-controller, istio-operator, zarf, cert-manager, k8sgpt, flux-source-controller, k9s, kots, kubescape, trivy, cilium-cli, helm-push, up,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: helm-operator, eksctl, chartmuseum, flux-helm-controller, istio-operator, zarf, cert-manager, k8sgpt, flux-source-controller, k9s, kots, kubescape, trivy, cilium-cli, helm-push, up,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: external-secrets-operator, flux-kustomize-controller, argo-cd, tekton-pipelines, cert-manager, tekton-chains, cilium-envoy, terragrunt, vexctl, dex, cloudflared, rekor, gitsign, kubescape, falco, oauth2-proxy, argo-workflows, cosign, fulcio, traefik,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: k3s, tekton-pipelines, cert-manager, skaffold, kpt, tekton-chains, goreleaser, k3d, kubescape, bom, falco, up, prometheus, ctop, slsa-verifier, chartmuseum, loki, aactl, paranoia,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: frp, ingress-nginx-controller, metrics-server, aws-efs-csi-driver, goreleaser, kubescape, kubeflow-katib, bom, dotnet, nvidia-device-plugin, minio, prometheus-stackdriver-exporter, cosign, prometheus, envoy-ratelimit, flux-source-controller, src, amass, calico,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: esbuild, ingress-nginx-controller, metrics-server, goreleaser, hubble-ui, certificate-transparency, kubescape, oras, fulcio, sbomqs, envoy-ratelimit, nsc, volume-modifier-for-k8s, cilium, nuclei, calico, kube-bench, bincapz, kind, kaniko, external-dns,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, bank-vaults, docker-credential-ecr-login, hcloud, frp, delve, go-bindata, wait-for-port, dockerize, crossplane-provider-gcp, mongo-tools, nfs-subdir-external-provisioner, metrics-server, tekton-chains, cri-tools, aws-efs-csi-driver,.....

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, docker-credential-ecr-login, go-bindata, wait-for-port, nats, local-path-provisioner, nri-discovery-kubernetes, go-md2man, helm-push, ip-masq-agent, metrics-server, cilium-envoy, goreleaser, hey, aws-flb-firehose, k3d, cass-operator,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: ferretdb, bank-vaults, frp, dockerize, mongo-tools, nfs-subdir-external-provisioner, metrics-server, tekton-chains, terragrunt, goreleaser, nri-mssql, certificate-transparency, kubeflow-katib, kubescape, bom, prometheus-nats-exporter, prometheus-stackdriver-exporter,.....

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, bank-vaults, frp, nfs-subdir-external-provisioner, metrics-server, aws-efs-csi-driver, goreleaser, kubeflow-katib, bom, nvidia-device-plugin, minio, prometheus-stackdriver-exporter, runc, cosign, zot, prometheus, consul,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3s, zarf, docker-credential-gcr, buildkitd, tekton-pipelines, cert-manager, skaffold, flux-image-reflector-controller, timoni, tekton-chains, cri-tools, istio-pilot-agent, vexctl, goreleaser, newrelic-infrastructure-agent, gitlab-runner, gitsign, kubescape,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, bank-vaults, frp, ingress-nginx-controller, crossplane-provider-gcp, kor, nfs-subdir-external-provisioner, tekton-chains, metrics-server, cri-tools, terragrunt, aws-efs-csi-driver, goreleaser, hubble-ui, hubble, cass-operator,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, docker-credential-ecr-login, delve, go-bindata, wait-for-port, nri-redis, dockerize, esbuild, ingress-nginx-controller, kor, mongo-tools, nfs-subdir-external-provisioner, metrics-server, cri-tools, aws-efs-csi-driver, goreleaser,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, docker-credential-ecr-login, delve, go-bindata, wait-for-port, nri-redis, dockerize, esbuild, ingress-nginx-controller, kor, mongo-tools, nfs-subdir-external-provisioner, metrics-server, cri-tools, aws-efs-csi-driver, goreleaser,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rook, flux-kustomize-controller, zarf, bank-vaults, buildkitd, fluent-bit-plugin-loki, cert-manager, tekton-pipelines, flux-image-reflector-controller, hugo, teleport, tekton-chains, grafana-agent-operator, terragrunt, goreleaser,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rook, flux-kustomize-controller, zarf, bank-vaults, buildkitd, fluent-bit-plugin-loki, cert-manager, tekton-pipelines, flux-image-reflector-controller, hugo, teleport, tekton-chains, grafana-agent-operator, terragrunt, goreleaser,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: prometheus, k3s, prometheus-adapter, caddy, gitlab-kas, cert-manager, up, kubevela, kubernetes, keda, calico, gatekeeper, ipfs,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: prometheus, k3s, prometheus-adapter, caddy, gitlab-kas, cert-manager, up, kubevela, kubernetes, keda, calico, gatekeeper, ipfs,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, metrics-server, hubble-ui, certificate-transparency, kubescape, oras, fulcio, sbomqs, nerdctl, nsc, volume-modifier-for-k8s, wave, cilium, kube-bench, kind, kaniko, octo-sts, external-dns, neuvector-sigstore-interface, dgraph, wolfictl,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, bank-vaults, docker-credential-ecr-login, hcloud, frp, delve, go-bindata, wait-for-port, dockerize, crossplane-provider-gcp, mongo-tools, nfs-subdir-external-provisioner, metrics-server, tekton-chains, cri-tools, aws-efs-csi-driver,.....

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, bank-vaults, docker-credential-ecr-login, hcloud, frp, delve, go-bindata, wait-for-port, dockerize, crossplane-provider-gcp, mongo-tools, nfs-subdir-external-provisioner, metrics-server, tekton-chains, cri-tools, aws-efs-csi-driver,.....

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: esbuild, ingress-nginx-controller, metrics-server, goreleaser, hubble-ui, certificate-transparency, kubescape, oras, fulcio, sbomqs, envoy-ratelimit, nsc, volume-modifier-for-k8s, cilium, nuclei, calico, kube-bench, bincapz, kind, kaniko, external-dns,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, metrics-server, hubble-ui, certificate-transparency, kubescape, oras, fulcio, sbomqs, nerdctl, nsc, volume-modifier-for-k8s, wave, cilium, kube-bench, kind, kaniko, octo-sts, external-dns, neuvector-sigstore-interface, dgraph, wolfictl,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, bank-vaults, frp, nfs-subdir-external-provisioner, tekton-chains, metrics-server, aws-efs-csi-driver, goreleaser, kubescape, kubeflow-katib, bom, nvidia-device-plugin, minio, prometheus-stackdriver-exporter, runc, cosign, zot, prometheus,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, docker-credential-ecr-login, delve, go-bindata, wait-for-port, nri-redis, dockerize, esbuild, ingress-nginx-controller, kor, mongo-tools, nfs-subdir-external-provisioner, metrics-server, cri-tools, aws-efs-csi-driver, goreleaser,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, docker-credential-ecr-login, delve, go-bindata, wait-for-port, nri-redis, dockerize, esbuild, ingress-nginx-controller, kor, mongo-tools, nfs-subdir-external-provisioner, metrics-server, cri-tools, aws-efs-csi-driver, goreleaser,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: k3s, temporal, docker-compose, kubernetes-csi-external-resizer, kyverno, containerd, argo-cd, envoy-ratelimit, cert-manager, kubevela, kubernetes, kubescape, kine, temporal-server, keda, aws-ebs-csi-driver,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: k3s, temporal, docker-compose, kubernetes-csi-external-resizer, kyverno, containerd, argo-cd, envoy-ratelimit, cert-manager, kubevela, kubernetes, kubescape, kine, temporal-server, keda, aws-ebs-csi-driver,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, calico, ip-masq-agent, nodetaint, aws-ebs-csi-driver,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: prometheus-adapter, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, calico, ip-masq-agent, nodetaint, aws-ebs-csi-driver,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: helm-operator, eksctl, chartmuseum, flux-helm-controller, istio-operator, zarf, cert-manager, k8sgpt, flux-source-controller, k9s, kots, kubescape, trivy, cilium-cli, helm-push, up,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rook, flux-kustomize-controller, ko, zarf, argo-cd, tekton-pipelines, cert-manager, frp, weaviate, skaffold, apko, grpc-health-probe, tekton-chains, istio-pilot-agent, terragrunt, goreleaser, timestamp-authority, istio-cni, containerd, dex,.....

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, ferretdb, docker-credential-ecr-login, delve, go-bindata, wait-for-port, nri-redis, dockerize, esbuild, ingress-nginx-controller, kor, mongo-tools, nfs-subdir-external-provisioner, metrics-server, cri-tools, aws-efs-csi-driver, goreleaser,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, metrics-server, hubble-ui, certificate-transparency, kubescape, oras, fulcio, sbomqs, nerdctl, nsc, volume-modifier-for-k8s, wave, cilium, kube-bench, kind, kaniko, octo-sts, external-dns, neuvector-sigstore-interface, dgraph, wolfictl,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, docker-credential-ecr-login, go-bindata, wait-for-port, nats, local-path-provisioner, nri-discovery-kubernetes, go-md2man, helm-push, ip-masq-agent, metrics-server, cilium-envoy, goreleaser, hey, aws-flb-firehose, k3d, cass-operator,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, docker-credential-ecr-login, go-bindata, wait-for-port, nats, local-path-provisioner, nri-discovery-kubernetes, go-md2man, helm-push, ip-masq-agent, metrics-server, cilium-envoy, goreleaser, hey, aws-flb-firehose, k3d, cass-operator,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, docker-credential-ecr-login, go-bindata, wait-for-port, nats, local-path-provisioner, nri-discovery-kubernetes, go-md2man, helm-push, ip-masq-agent, metrics-server, cilium-envoy, goreleaser, hey, aws-flb-firehose, k3d, cass-operator,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rook, flux-kustomize-controller, ko, zarf, argo-cd, tekton-pipelines, cert-manager, frp, weaviate, skaffold, apko, grpc-health-probe, tekton-chains, istio-pilot-agent, terragrunt, goreleaser, timestamp-authority, istio-cni, containerd, dex,.....

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: ferretdb, bank-vaults, frp, dockerize, mongo-tools, nfs-subdir-external-provisioner, metrics-server, tekton-chains, terragrunt, goreleaser, nri-mssql, certificate-transparency, kubeflow-katib, kubescape, bom, prometheus-nats-exporter, prometheus-stackdriver-exporter,.....

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, bank-vaults, frp, nfs-subdir-external-provisioner, metrics-server, aws-efs-csi-driver, goreleaser, kubeflow-katib, bom, nvidia-device-plugin, minio, prometheus-stackdriver-exporter, runc, cosign, zot, prometheus, consul,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, bank-vaults, frp, nfs-subdir-external-provisioner, tekton-chains, metrics-server, aws-efs-csi-driver, goreleaser, kubescape, kubeflow-katib, bom, nvidia-device-plugin, minio, prometheus-stackdriver-exporter, runc, cosign, zot, prometheus,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, ko, gitlab-pages, prometheus-blackbox-exporter, terraform-provider-azurerm, argo-cd, buildkitd, cert-manager, terraform, up, pulumi-language-yaml, weaviate, pulumi-kubernetes-operator, tctl, coredns, metrics-server, cilium-envoy,...