CVE-2022-2835 vulnerabilities

Vulnerabilities for packages: juicefs...

Security Bulletin: IBM Storage Protect Server is susceptible to multiple authentication related vulnerabilities due to coreDNS (CVE-2022-2837, CVE-2022-2835, CVE-2024-0874).

Summary The IBM Storage Protect Server is susceptible to authentication-related vulnerabilities linked to coreDNS. These vulnerabilities may allow authenticated attacker to bypass security restrictions. Vulnerability Details CVEID:CVE-2022-2837 DESCRIPTION: coreDNS could allow a remote...

CVE-2022-2835 vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2022-2835

CVE-2022-2835 is reported in IBM security bulletins as being related to coreDNS and linked to IBM Storage Protect Server. The vulnerability allows a local authenticated attacker to bypass security restrictions and reroute internal calls to internal services by abusing the FQDN format used for int...

CVE-2022-2835

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of ..svc...