Lucene search
+L

12 matches found

Cvelist
Cvelist
•added 2026/10/31 8:57 a.m.•29 views

CVE-2026-117681 Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

8CVSS0.00097EPSS
SaveExploits0References2
Rows per page
Query Builder