The vulnerability of the cluster software-defined networking control interface of Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco SD-WAN programmatically-defined network management interface is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the cluster software-defined networking control interface of Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco SD-WAN programmatically-defined network management interface is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Arbitrary File Read Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-39129)

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is an arbitrary file read vulnerability in the Library Cluster Management System of Guangzhou Tutron Computer Software Developmen...

The vulnerability of the cluster-mode programmable Cisco SD-WAN architecture allows a intruder to gain unauthorized access to services within the vulnerable system.

The vulnerability of the programmable network-based Cisco SD-WAN architecture in cluster mode is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to services within the vulnerable system...

pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: crmmon not able to detect resource-status when used in stop-operation of a Resource Agent during no...

pacemaker bug fix and enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

ALBA-2021:1996 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: crmmon not able to detect resource-status when used in stop-operation of a Resource Agent during no...

corosync bug fix and enhancement update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Bug Fixes and Enhancements: corosync crash with compression enabled BZ1951049...

ALBA-2021:1994 corosync bug fix and enhancement update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Bug Fixes and Enhancements: corosync crash with compression enabled BZ1951049...

GO-2022-0755 Cross-site request forgery in github.com/rancher/rancher

Rancher 2 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher...

openSUSE Security Update : redis (openSUSE-2021-682)

This update for redis fixes the following issues : redis 6.0.13 - CVE-2021-29477: Integer overflow in STRALGO LCS command boo1185729 - CVE-2021-29478: Integer overflow in COPY command for large intsets boo1185730 - Cluster: Skip unnecessary check which may prevent failure detection - Fix...

Information Disclosure

elasticsearch is vulnerable to information disclosure. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries when Document or Field Level Security is used, resulting in the search disclosing the existence of documents a user should not be...

CVE-2021-22137

In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the...

Design/Logic Flaw

In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the...

PT-2021-14865 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.11.2 Elasticsearch versions prior to 6.8.15 Description: A document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when...

HPE iLO Amplifier Pack Remote Code Execution Vulnerability

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

May 11, 2021—KB5003203 (Security-only update)

None None...

May 11, 2021—KB5003208 (Monthly Rollup)

None None...

May 11, 2021—KB5003228 (Security-only update)

None None...

Kiali-operator 安全漏洞

kiali-operator is a software application. It is used to build operator images and push the built images to Quay.io. A security vulnerability exists in Kiali-operator. The vulnerability allows an attacker to deploy a given image to any location in a cluster, potentially gaining access to privilege...