Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2021/12/17 8:41 p.m.23 views

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

7.5CVSS7.1AI score0.00237EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/12/16 7:8 p.m.12 views

CVE-2020-35209

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

7.4AI score0.00237EPSS
Exploits0References1
CVE
CVE
added 2017/08/18 8:0 p.m.61 views

CVE-2017-8445

CVE-2017-8445 affects Elasticsearch X-Pack Security TLS trust manager in versions 5.0.0–5.5.1. If trust material reload fails, the trust manager can be replaced with an instance that trusts all certificates, potentially allowing any node using any certificate to join a cluster. The authenticated ...

5.5CVSS5.3AI score0.00027EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/08/18 8:0 p.m.20 views

CVE-2017-8445

An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior i...

5.3AI score0.00027EPSS
Exploits0References1
NVD
NVD
added 2012/05/03 11:55 p.m.15 views

CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

7.5CVSS6.5AI score0.02981EPSS
Exploits1References5
Prion
Prion
added 2012/05/03 11:55 p.m.13 views

Design/Logic Flaw

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

7.5CVSS7AI score0.02981EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2012/05/03 11:0 p.m.19 views

CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

6.4AI score0.02981EPSS
Exploits1References5
Rows per page
Query Builder