GHSA-4JHW-C53W-W5R7 PipeCD Vulnerable to Privilege Escalation

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53351

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53350

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53349

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s cluster...

CVE-2024-53349

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s cluster...

kubeslice 安全漏洞

kubeslice is a kubeslice open source application that enables multi-cloud, multi-cluster service connectivity. A security vulnerability exists in kubeslice version 1.3.1, which stems from improper privileges and could allow an attacker to obtain a token for a service account and elevate privilege...

CVE-2024-53351

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges...

PipeCD 安全漏洞

PipeCD is a PipeCD open source application. A security vulnerability exists in PipeCD version 0.49, which stems from improper privileges and could allow an attacker to obtain a token for a service account and elevate privileges...

CVE-2024-53350

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53351

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2024-53351 are not provided in the connected documents; monitor for updates from multiple sources for concrete details.

CVE-2024-53351

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53349

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s cluster...

kubeslice 安全漏洞

kubeslice is a kubeslice open source application that enables multi-cloud, multi-cluster service connectivity. A security vulnerability exists in kubeslice version 0.11.3, which stems from improper privileges and could allow an attacker to obtain a token for a service account and elevate privileg...

CVE-2024-53350

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53350

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53351

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges...

CVE-2024-53350

CVE-2024-53350 affects kubeslice v1.3.1. Insecure permissions allow an attacker to access the service account token, enabling privilege escalation. The vulnerability is exposed over network (CVSS: 7.4, HIGH) with no user interaction required; attacker privileges are NONE but can read the token to...

CVE-2025-26701

An issue was discovered in Percona PMM Server OVA before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3...

CVE-2025-0360

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API...

SolarWinds Platform TestWebsiteUrl Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the TestWebsiteUrl method. The issue results from the lack...