CVE-2022-2837 vulnerabilities

Vulnerabilities for packages: juicefs...

Security Bulletin: IBM Storage Protect Server is susceptible to multiple authentication related vulnerabilities due to coreDNS (CVE-2022-2837, CVE-2022-2835, CVE-2024-0874).

Summary The IBM Storage Protect Server is susceptible to authentication-related vulnerabilities linked to coreDNS. These vulnerabilities may allow authenticated attacker to bypass security restrictions. Vulnerability Details CVEID:CVE-2022-2837 DESCRIPTION: coreDNS could allow a remote...

CVE-2022-2837

A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains TLD to a pod they control by creating projects and namespaces that match the TLD...

CVE-2022-2837 vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2022-2837

CVE-2022-2837 affects the CoreDNS component. The description in the provided documents states that a malicious user could redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD. The CVE has a base score of 6.1 (M...

CVE-2022-2837

A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains TLD to a pod they control by creating projects and namespaces that match the TLD. Mitigation - Add a default admission controller to prevent the creation of projects or...