Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.6 views

CVE-2026-6389

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials,...

8.8CVSS5.5AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2026/04/30 10:16 p.m.4 views

CVE-2026-6389

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials,...

8.8CVSS0.00106EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/30 9:17 p.m.3 views

CVE-2026-6389

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials,...

8.8CVSS5.3AI score0.00106EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/30 9:17 p.m.5 views

CVE-2026-6389 IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials,...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/30 9:17 p.m.5 views

EUVD-2026-26446

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials,...

8.8CVSS5.3AI score0.00106EPSS
Exploits0References1
CVE
CVE
added 2026/04/30 9:17 p.m.7 views

CVE-2026-6389

IBM Turbonomic Prometurbo agent (application resource management) versions 8.16.0–8.17.6 expose cluster‑wide permissions, including unrestricted read access to all secrets. This enables an attacker with operator/service account access to exfiltrate credentials, escalate privileges, and potentiall...

8.8CVSS5.3AI score0.00106EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/30 9:17 p.m.34 views

CVE-2026-6389 IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials,...

8.8CVSS0.00106EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/30 12:0 a.m.8 views

IBM Turbonomic prometurbo agent 安全漏洞

The IBM Turbonomic prometurbo agent is a component in IBM Turbonomic Application Resource Management that is used to manage resource configurations. An elevation of privilege vulnerability exists in IBM Turbonomic prometurbo agent. The vulnerability stems from an excessive cluster-wide permission...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.7 views

PT-2026-36199

Name of the Vulnerable Software and Affected Versions IBM Turbonomic prometurbo agent versions 8.16.0 through 8.17.6 Description IBM Turbonomic Application Resource Management grants excessive cluster-wide permissions, which include unrestricted read access to all secrets. An attacker who...

8.8CVSS5.8AI score0.00106EPSS
Exploits0References9
Hacker One
Hacker One
added 2024/09/04 1:40 p.m.4 views

IBM: SSRF and secret key disclosure found on Turbonomic endpoint

The vulnerability of SSRF and secret key disclosure was found on a Turbonomic endpoint and reported to IBM. The issue was analyzed and remediated...

6.9AI score
Exploits0
Hacker One
Hacker One
added 2024/09/04 1:31 p.m.6 views

IBM: SSRF and secret key disclosure found on Turbonomic endpoint

The SSRF and secret key disclosure vulnerabilities found on the Turbonomic endpoint were reported to IBM, analyzed, and remediated...

7.2AI score
Exploits0
Rows per page
Query Builder