5523 matches found
It was found in OpenShift before version 4.8 that the generated certificate for the in-cluster Service CA incorrectly included additional certificates. The Service CA is automatically mounted into all pods allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.
...
PT-2024-24143 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...
CVE-2024-24862
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2021-47213
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-26209
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...
CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
...
EUVD-2024-23485
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...
CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
...
PT-2024-3015 · Microsoft · Lsass +1
Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Local Security Authority Subsystem Service LSASS of Windows operating system...
Microsoft Windows Local Security Authority Subsystem Service 安全漏洞
Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...
CVE-2024-25029
IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution RCE and local privilege escalation LPE. The vulnerability allows any unprivileged user with network access to a target computer to run commands with full privileges in the...
CVE-2024-25029
IBM Personal Communications (PCOMM) v14.x–v15.x is vulnerable to remote code execution and local privilege escalation via a Windows service, allowing an unauthenticated network attacker to execute commands with SYSTEM privileges due to an incomplete fix for CVE-2024-25029. Supported affected vers...
CVE-2024-25029 IBM Personal Communications code execution
IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution RCE and local privilege escalation LPE. The vulnerability allows any unprivileged user with network access to a target computer to run commands with full privileges in the...
SUSE CVE-2024-26720
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-26794
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2023-52630
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-26701
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2024-26720
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
