Lucene search
K

6 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/04/04 9:24 p.m.20 views

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper and Incorrect Authorization and SQL Injection in Vault (CVE-2023-0665, CVE-2023-24999, CVE-2023-0620)

Summary Vault is used by IBM Storage Fusion Data Foundation as part of user authentication. This bulletin identifies the steps to take to address the vulnerability in IBM Storage Fusion Data Foundation. CVE-2023-0665, CVE-2023-24999, CVE-2023-0620. Vulnerability Details CVEID:CVE-2023-0665...

8.1CVSS7.8AI score0.00597EPSS
Exploits0Affected Software1
RedHat Linux
RedHat Linux
added 2023/10/31 12:54 p.m.53 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.0 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

9.8CVSS7AI score0.99999EPSS
Exploits29References1323
RedHat Linux
RedHat Linux
added 2023/05/17 10:30 p.m.47 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update

Red Hat OpenShift Container Platform release 4.13.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

9.1CVSS7AI score0.05994EPSS
Exploits9References909
Wolfi
Wolfi
added 2023/03/30 1:15 a.m.180 views

CVE-2023-0665 vulnerabilities

Vulnerabilities for packages: k3d...

6.5CVSS7.5AI score0.00332EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2023/03/30 12:21 a.m.11 views

CVE-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault...

6.5CVSS6.3AI score0.00332EPSS
Exploits0References2
CVE
CVE
added 2023/03/30 12:21 a.m.371 views

CVE-2023-0665

HashiCorp Vault’s PKI mount issuer endpoints were vulnerable to insufficient access control, allowing a remote attacker to cause a denial of service by removing an issuer or altering issuer metadata. The defect specifically affects the PKI issuer management surface but does not impact private key...

6.5CVSS6.5AI score0.00332EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder