CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: caddy, eks-distro, cloudflared, traefik-fips, traefik, caddy-fips, kubernetes-dns-node-cache, eks-distro-fips, q, k3s, spegel, buf, frp, kubernetes-dns-node-cache-fips...

GO-2022-0845 Local Privilege Escalation in cloudflared in github.com/cloudflare/cloudflared

Local Privilege Escalation in cloudflared in github.com/cloudflare/cloudflared...

GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared

cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...

GHSA-M9W6-WP3H-VQ8G vulnerabilities

Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache, juicefs...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache, juicefs...

CVE-2024-22189 vulnerabilities

Vulnerabilities for packages: cloudflared, q, caddy, k3s...

GHSA-C33X-XQRF-C478 vulnerabilities

Vulnerabilities for packages: cloudflared, q, caddy, k3s...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: argo-workflows, policy-controller, dgraph, zarf, kots, skopeo, vexctl, sigstore-scaffolding, timestamp-authority, zot, goreleaser, slsa-verifier, sops, dex, temporal, cosign, cloudflared, step, ko, rekor, fulcio, minio, terragrunt, nerdctl, bank-vaults, frp,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, up, request-1279, weaviate, external-dns, sops, nri-prometheus, volume-modifier-for-k8s, crossplane-provider-aws-eks, prometheus-adapter-fips, cass-operator, k8ssandra-operator-fips, kaf, velero, aws-efs-csi-driver, mc-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, up, request-1279, weaviate, external-dns, sops, nri-prometheus, volume-modifier-for-k8s, crossplane-provider-aws-eks, prometheus-adapter-fips, cass-operator, k8ssandra-operator-fips, kaf, velero, aws-efs-csi-driver, mc-fips,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: argo-workflows, vexctl, slsa-verifier, sops, dex, cosign, cloudflared, rekor, fulcio, terragrunt, spire-server, kubescape, flux-source-controller, tkn, aactl, gitsign, flux-kustomize-controller, tekton-chains, kots, oauth2-proxy...

Hackers Abusing Cloudflare Tunnels for Covert Communications

New research has revealed that threat actors are abusing Cloudflare Tunnels to establish covert communication channels from compromised hosts and retain persistent access. "Cloudflared is functionally very similar to ngrok," Nic Finn, a senior threat intelligence analyst at GuidePoint Security,...

cloudflared 输入验证错误漏洞

Cloudflare cloudflared is a cloud server security management platform from American company Cloudflare. The platform provides firewall analysis, cache control, role-based access, and more. A security vulnerability exists in versions prior to cloudflared v1.20230419.0, which stems from an...

Privilege Escalation

github.com/cloudflare/cloudflared is vulnerable to Privilege Escalation. A local attacker with no administrative permissions may use symbolic links to manipulate the MSI installer's repair functionality to delete important system files or replace them with malicious files, potentially leading to...

cloudflared's Installer has Local Privilege Escalation Vulnerability

Impact A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared...

GHSA-7MJV-X3JF-545X cloudflared's Installer has Local Privilege Escalation Vulnerability

Impact A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared...

CVE-2023-1314

A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...

Design/Logic Flaw

A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...

CVE-2023-1314 Local Privilege Escalation Vulnerability in cloudflared's Installer

A vulnerability has been discovered in cloudflared's installer = 2023.3.0 for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied...

CVE-2023-1314

Cloudflared’s Windows 32-bit installer (≤ 2023.3.0) is affected by a Local Privilege Escalation. The MSI installer relied on a world-writable directory, enabling a local non-admin user to exploit symbolic links and trick the installer’s repair function into deleting or overwriting files, potentia...