PT-2021-2971

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.3 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

SQL Injection Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-34454)

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is a SQL injection vulnerability in the Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.,...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.0.10 security and bug fix updates

Red Hat Advanced Cluster Management for Kubernetes 2.0.10 General Availability release, which fixes bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Privilege Escalation

hadoop-ozone-client is vulnerable to privilege escalation. An attacker can use a curl command or an unauthenticated HTTP request to access S3 buckets and keys in a secure Apache Ozone Cluster, thereby allowing unauthorized access to buckets and keys resulting in exposure of data to anonymous...

CVE-2020-17517 Ozone S3 Gateway allows bucket and key access to non authenticated users

The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The current security vulnerability allows access to keys and buckets through a curl command or an unauthenticated HTTP request. This enables unauthorized access to buckets and keys thereb...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.1.6 security and bug fix updates

Red Hat Advanced Cluster Management for Kubernetes 2.1.6 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

Exploit for Incomplete Internal State Distinction in Kubernetes

CVE-2021-25735 Exploit CVE-2021-25735: Kubernetes Validatin...

File Upload Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-32386)

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. A file upload vulnerability exists in the Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. An...

SQL Injection Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. A SQL injection vulnerability exists in the Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. An...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.7 security update

Red Hat OpenShift Container Platform release 4.7.7 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...

KubiScan - A Tool To Scan Kubernetes Cluster For Risky Permissions

A tool for scanning Kubernetes cluster for risky permissions in Kubernetes's Role-based access control RBAC authorization model. The tool was published as part of the "Securing Kubernetes Clusters by Eliminating Risky Permissions" research...

RHEL 7 / 8 : OpenShift Container Platform 4.7.7 (RHSA-2021:1150)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1150 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

SUSE: Security Advisory (SUSE-SU-2020:3882-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

April 13, 2021—KB5001389 (Monthly Rollup)

None None...

April 13, 2021—KB5001382 (Monthly Rollup)

None None...

April 13, 2021—KB5001393 (Security-only update)

None None...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.2 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.2 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker never promotes a bundle until another transition unblocks it BZ1935240 pacemaker generate...

ALBA-2021:1088 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker never promotes a bundle until another transition unblocks it BZ1935240 pacemaker generate...