53 matches found
GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared
cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...
GHSA-M9W6-WP3H-VQ8G vulnerabilities
Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache, juicefs...
CVE-2024-0874 vulnerabilities
Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache, juicefs...
CVE-2024-22189 vulnerabilities
Vulnerabilities for packages: caddy, k3s, q, ipfs, cloudflared, coredns...
GHSA-C33X-XQRF-C478 vulnerabilities
Vulnerabilities for packages: caddy, k3s, q, ipfs, cloudflared, coredns...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: caddy, tkn, kots, falco, ko, flux-source-controller, oauth2-proxy, skopeo, grpc-health-probe, policy-controller, weaviate, skaffold, ipfs, kube-rbac-proxy, nerdctl, timestamp-authority, zarf, falcoctl, sops, cosign, flux-kustomize-controller, bank-vaults, apko, rekor...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: prometheus-nats-exporter, crossplane-provider-gcp, amass, k9s, nri-discovery-kubernetes, nats, gh, hugo-extended, pulumi, kube-bench, kwok, k8sgpt, boring-registry, crossplane-provider-family-aws, kube-logging-operator, kuberay-operator, cert-exporter, k3d,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-nats-exporter, crossplane-provider-gcp, amass, k9s, nri-discovery-kubernetes, nats, gh, hugo-extended, pulumi, kube-bench, kwok, k8sgpt, boring-registry, crossplane-provider-family-aws, kube-logging-operator, kuberay-operator, cert-exporter, k3d,...
GHSA-2C7C-3MJ9-8FQH vulnerabilities
Vulnerabilities for packages: tkn, kots, falco, flux-source-controller, oauth2-proxy, sops, cosign, flux-kustomize-controller, rekor, argo-workflows, gitsign, vexctl, cloudflared, slsa-verifier, fulcio, kubescape, spire-server, aactl, dex, tekton-chains, external-secrets-operator, terragrunt...
Hackers Abusing Cloudflare Tunnels for Covert Communications
New research has revealed that threat actors are abusing Cloudflare Tunnels to establish covert communication channels from compromised hosts and retain persistent access. "Cloudflared is functionally very similar to ngrok," Nic Finn, a senior threat intelligence analyst at GuidePoint Security,...
cloudflared 输入验证错误漏洞
Cloudflare cloudflared is a cloud server security management platform from American company Cloudflare. The platform provides firewall analysis, cache control, role-based access, and more. A security vulnerability exists in versions prior to cloudflared v1.20230419.0, which stems from an...
Privilege Escalation
github.com/cloudflare/cloudflared is vulnerable to Privilege Escalation. A local attacker with no administrative permissions may use symbolic links to manipulate the MSI installer's repair functionality to delete important system files or replace them with malicious files, potentially leading to...
GHSA-7MJV-X3JF-545X cloudflared's Installer has Local Privilege Escalation Vulnerability
Impact A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared...
cloudflared's Installer has Local Privilege Escalation Vulnerability
Impact A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared...
CVE-2023-1314
A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...
CVE-2023-1314
A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...
Design/Logic Flaw
A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...
CVE-2023-1314
Cloudflared’s Windows 32-bit installer (≤ 2023.3.0) is affected by a Local Privilege Escalation. The MSI installer relied on a world-writable directory, enabling a local non-admin user to exploit symbolic links and trick the installer’s repair function into deleting or overwriting files, potentia...
CVE-2023-1314 Local Privilege Escalation Vulnerability in cloudflared's Installer
A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...
CVE-2023-1314 Local Privilege Escalation Vulnerability in cloudflared's Installer
A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...