22092 matches found
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36540
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
Vulnerability found in Ivanti Endpoint Manager
Ivanti has fixed vulnerabilities in Ivanti Endpoint Manager. Vulnerabilities have been fixed in Ivanti Endpoint Manager. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Remote code execution User rights Remote code execution...
Improper Authentication
org.apache.streampark, streampark is vulnerable to Improper Authentication. The vulnerability is due to improper session management allowing the "Authorization" credential to remain valid even after logout, enabling attackers to use this credential to initiate requests and potentially access data...
CVE-2024-36535
A security vulnerability exists in meshery v0.7.51 and earlier versions caused by improper access control due to insecure permissions. Attackers can exploit this flaw to access sensitive data and escalate privileges by obtaining a service account's token. Remediation involves updating to a versio...
PT-2024-27056 · Fabedge · Fabedge
Name of the Vulnerable Software and Affected Versions: fabedge version 0.8.1 Description: The issue concerns insecure permissions in fabedge, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. Recommendations: For fabedge version 0.8.1,...
CVE-2024-36536
Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36541
Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36533: Improper Restriction of Security Token Assignment
Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36534
The hwameistor Kubernetes-native Container Attached Storage (CAS) solution is vulnerable to Improper Access Control in versions v0.14.3 and earlier. The root cause is insecure permissions and incorrectly configured permissions that allow an attacker to obtain a service account's token . Exploitin...
CVE-2024-36538
The open-source cloud-native engineering platform Chaos Mesh is vulnerable in version 2.6.3 and earlier due to insecure permissions . This flaw allows an attacker to access sensitive data and achieve privilege escalation by obtaining a service account's token . To remediate this issue, users are ...
cert-manager 安全漏洞
cert-manager is a certificate manager in the cert-manager open source. Adds certificates and certificate issuers as resource types in a Kubernetes cluster and simplifies the process of obtaining, renewing, and using these certificates. A security vulnerability exists in cert-manager v1.14.4 and...
CVE-2024-36535: Improper Access Control
Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36534
Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36535
Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36538
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36534
Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36540
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...