Lucene search
+L

107 matches found

Positive Technologies
Positive Technologies
added 2022/01/12 12:00 a.m.6 views

PT-2022-15859 · Jenkins · Jenkins Conjur Secrets Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Conjur Secrets Plugin versions 1.0.9 and earlier Description: The issue allows attackers who can control agent processes to decrypt secrets stored in Jenkins, which were obtained through another method. This is possible due to the...

7.5CVSS7.3AI score0.00828EPSS
SaveExploits0References9
NVD
NVD
added 2020/06/22 4:15 p.m.27 views

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

9CVSS0.01411EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/22 4:15 p.m.19 views

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

9CVSS7AI score
SaveExploits0References2
Prion
Prion
added 2020/06/22 4:15 p.m.23 views

Design/Logic Flaw

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

7.7CVSS9.1AI score0.01411EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/06/22 3:20 p.m.30 views

CVE-2020-4062 Improper Access Control in Conjur OSS Helm Chart

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

8.7CVSS9.2AI score0.01411EPSS
SaveExploits0References2
CVE
CVE
added 2020/06/22 3:20 p.m.46 views

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a critical issue leads to installing Conjur’s Postgres database with an open port. An attacker who knows the Postgres IP and port and has access to the Kubernetes cluster can gain full read/write access to the database, escalate privileges, and write policie...

9CVSS9.2AI score0.01411EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/06/22 12:00 a.m.10 views

PT-2020-17857 · Cyberark +2 · Conjur Oss +3

Name of the Vulnerable Software and Affected Versions: Conjur OSS Helm Chart versions prior to 2.0.0 Description: A critical issue in the Conjur OSS Helm Chart results in the installation of the Conjur Postgres database with an open port, allowing an attacker to gain full read and write access to...

9CVSS9.3AI score0.01411EPSS
SaveExploits0References5
Rows per page
Query Builder