CVE-2024-56513: Incorrect Privilege Assignment

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

Oxide 安全漏洞

Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 6 that stems from having unencrypted control plane data storage...

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

CVE-2024-55582: Cleartext Storage of Sensitive Information

Oxide before 6 has unencrypted Control Plane datastores...

PT-2024-36560

Name of the Vulnerable Software and Affected Versions Oxide versions prior to 6 Description The issue concerns unencrypted Control Plane datastores in Oxide. This means that data stored in the Control Plane is not encrypted, potentially exposing it to unauthorized access. There is no information...

CVE-2024-55582

CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

PT-2024-14005 · Oxide · Oxide

Name of the Vulnerable Software and Affected Versions: Oxide control plane software versions prior to 5 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external systems. This can...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

CVE-2023-50913: Server-Side Request Forgery (SSRF)

Oxide control plane software before 5 allows SSRF...

CVE-2023-50913

Oxide control plane software versions prior to 5 are vulnerable to Server-Side Request Forgery (SSRF) . This flaw allows an attacker to trick the server into making requests to internal or external systems, potentially leading to unauthorized access to sensitive data. To remediate this issue, use...

CVE-2024-50274

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...

SUSE CVE-2024-53064

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpfvccoreinit error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset i...

UBUNTU-CVE-2024-53064

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpfvccoreinit error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset i...

CVE-2024-53064 idpf: fix idpf_vc_core_init error path

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpfvccoreinit error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset i...

CVE-2024-53064 idpf: fix idpf_vc_core_init error path

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpfvccoreinit error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset i...

CVE-2024-50274 idpf: avoid vport access in idpf_get_link_ksettings

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...

Security Advisory 0106

Security Advisory 0106 . CSAF PDF Date: November 19, 2024 Revision | Date | Changes ---|---|--- 1.0 | November 19, 2024 | Initial release Description The CVE-ID tracking this issue: CVE-2024-5872 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Common Weakness Enumeration:...