Security Bulletin: IBM Robotic Process Automation for Cloud Pak is vulnerable to insufficient security configuration (CVE-2023-23468).

Summary IBM Robotic Process Automation for Cloud Pak is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster CVE-2023-23468. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details...

CVE-2022-32250

net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...

CVE-2019-10110

An Insecure Permissions issue issue 1 of 3 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on any GitLab instance on which they hold credential...