229 matches found
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: cortex, sqlpad, buildkitd, harbor-registry, hugo, guac, pulumi, terragrunt, wal-g, rclone, trivy, zarf, timestamp-authority, step-ca, velero, argo-workflows, fulcio, zot, py3-cassandra-medusa, chezmoi, goreleaser, bank-vaults, k8sgpt, nuclei, boring-registry, up,...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch-fips, kustomize-fips, atlantis-fips, harbor-registry, grafana-operator-fips, aws-efs-csi-driver-fips, cadvisor, node-problem-detector, flux-notification-controller, rekor, docker-credential-acr-env, go-bindata, mc, neuvector-scanner,...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, docker-credential-gcr, kubeflow-katib, tekton-chains, zarf, flux-helm-controller, skaffold, buildkitd, slsa-verifier, aactl, cri-tools, kubescape, goreleaser, timoni, crane, falcoctl-fips, cadvisor, chartmuseum, up, helm-operator-fips...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, docker-credential-gcr, kubeflow-katib, tekton-chains, zarf, flux-helm-controller, skaffold, buildkitd, slsa-verifier, aactl, cri-tools, kubescape, goreleaser, timoni, crane, falcoctl-fips, cadvisor, chartmuseum, up, helm-operator-fips...
CVE-2023-36649
Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...
CVE-2023-36649
Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...
CVE-2023-36649
Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...
Authentication flaw
Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...
CVE-2023-36649
Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...
CVE-2023-36649: Insertion of Sensitive Information into Log File
Insertion of sensitive information in the centralized Grafana logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Granafa authenticated user or from the Loki REST API without...
CVE-2023-36649
ProLion CryptoSpike 3.0.15P2 is affected by an authentication/authorization issue arising from insertion of sensitive information into the centralized Grafana logging system, enabling remote attackers to impersonate other users in web management and REST API by reading JWT tokens from logs or the...
PT-2023-25652 · Grafana +1 · Loki +2
Name of the Vulnerable Software and Affected Versions: ProLion CryptoSpike version 3.0.15P2 Description: The issue allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs as a Grafana authenticated user or from the Loki REST API withou...
GHSA-JQ35-85CJ-FJ4P vulnerabilities
Vulnerabilities for packages: k3s, falcoctl-fips, chartmuseum, kpt, up, tekton-chains, skaffold, paranoia, ctop, k3d, scorecard, spire-server-fips, slsa-verifier, aactl, kubescape, bom...
CVE-2023-0813
A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...
CVE-2023-0813
A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...
Authentication flaw
A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...
PT-2023-16542 · Red Hat +1 · Openshift Console +1
Name of the Vulnerable Software and Affected Versions: OpenShift console affected versions not specified Description: A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced,...
CVE-2023-0813: Improper Authorization
A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...