CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: nri-kafka, redka, aws-signer-notation-plugin, tailscale, spqr, kubernetes-dashboard-api, wave, cadvisor, php-fpmexporter, sriov-network-device-plugin, gobuster, bom, grafana-operator, openbao-k8s, crossplane-provider-aws-elasticache, yunikorn-k8shim, kubewatch,...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver-fips, kubernetes-dns-node-cache-fips, k8s-device-plugin, argocd-image-updater-fips, local-static-provisioner, aws-efs-csi-driver, rancher-webhook-fips, argocd-image-updater, kubeflow-pipelines, rancher-webhook,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, aws-efs-csi-driver-fips, aws-efs-csi-driver, argocd-image-updater...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, aws-efs-csi-driver-fips, aws-efs-csi-driver, argocd-image-updater...

CVE-2022-45157

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157

CVE-2022-45157 affects Rancher where vSphere CPI/CSI credentials used to deploy clusters are stored in plaintext within Rancher. This leads to HIGH impact on confidentiality and integrity for vSphere environments (passwords stored insecurely in a Rancher object). CVSS data in the initial document...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Summary Nomad Community and Nomad Enterprise “Nomad” volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and...

Hashicorp Nomad Incorrect Authorization vulnerability

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

UBUNTU-CVE-2024-10975

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

CVE-2024-10975 Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

CVE-2024-10975

CVE-2024-10975 affects HashiCorp Nomad: Nomad Community Edition prior to 1.9.2 and Nomad Enterprise prior to 1.9.2, 1.8.7, or 1.7.15. The issue allows arbitrary cross-namespace volume creation via unauthorized CSI writes, with CVSS v3.1 base score 7.7 (HIGH): network attack vector, requiring low ...

CVE-2024-10975 Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

CVE-2024-10975 Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Nomad Community and Nomad Enterprise "Nomad" volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface CSI volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad...

GO-2024-3223 Exposure of vSphere's CPI and CSI credentials in Rancher in github.com/rancher/rancher

Exposure of vSphere's CPI and CSI credentials in Rancher in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

PT-2024-10044 · Rancher +1 · Rancher +1

Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.8.9 Rancher versions prior to 2.9.3 Rancher versions 2.7.0 through 2.7.x Description: A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container...

Moderate: Red Hat Bug Fix Advisory: LVMS 4.15.8 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.15 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...