176 matches found
Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞
Hewlett Packard Enterprise Performance Cluster Manager is a security vulnerability in Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager that stems from a problem with the cmdb service and could result in access to arbitrary files...
CVE-2025-27086
A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...
CVE-2025-27086
A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...
CVE-2025-27086
A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...
CVE-2025-27086
CVE-2025-27086 describes an authentication bypass in the HPE Performance Cluster Manager (HPCM) GUI . The issue affects HPCM prior to a fixed version; PT Security notes affected versions through 1.12, with remediation by upgrading to a version containing the fix (e.g., 1.13 or later). Public sour...
PT-2025-17459 · Hewlett Packard · Hpe Performance Cluster Manager
Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM versions through 1.12 Description: A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication. This issue affects the HPE Performance Cluster Manager...
Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞
A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager, a Hewlett Packard Enterprise company. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager versions prior to 1.13 that originates from a possible bypass of authenticatio...
Privilege Escalation
open-cluster-management.io/ocm is vulnerable to Privilege Escalation. The vulnerability is due to improper service account management, where the cluster-manager service account is bound to a ClusterRole with broad permissions, including the ability to create Pod resources. It allows attackers on...
SUSE CVE-2024-9779
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
Open Cluster Management vulnerable to Trust Boundary Violation
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
GHSA-JHH6-6FHP-Q2XP Open Cluster Management vulnerable to Trust Boundary Violation
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
CVE-2024-9779
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
CVE-2024-9779 Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
CVE-2024-9779
CVE-2024-9779 – Open Cluster Management (OCM) is described across OSV/GHSA entries as a trust-boundary vulnerability in the cluster-manager workflow. The issue arises when a worker-node host runs the cluster-manager pod using a service account named “cluster-manager” bound to a ClusterRole that i...
CVE-2024-9779 Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
CVE-2024-9779 Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens
A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...
PT-2024-39837 · Unknown +1 · Open Cluster Management +1
Name of the Vulnerable Software and Affected Versions: Open Cluster Management OCM affected versions not specified Description: A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manag...
Open Cluster Management 安全漏洞
Open Cluster Management OCM is a community-driven project of Open Cluster Management open source. Focused on multi-cluster and multi-cloud scenarios for Kubernetes applications. A security vulnerability exists in Open Cluster Management that stems from a vulnerability found in Open Cluster...