GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: neuvector-scanner, buildkitd, newrelic-infrastructure-agent, zot, dagger, envoy-gateway, kubevela, zarf, k8sgpt, opa, eksctl, flux-source-controller, syft, helm-operator, docker-cli-buildx, grype, kargo, k3s, docker, cert-manager-cmctl, k8ssandra-client, melange,...

SUSE CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

GO-2025-3505 Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet

Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509 SAML authentication vulnerability due to improper SAML response validation

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509

Fleet has a SAML authentication vulnerability (CVE-2025-27509) due to improper SAML response validation in fleetdm/fleet. In vulnerable versions, an attacker could forge authentication assertions, potentially provisioning a new administrative user under JIT provisioning or creating accounts tied ...

Fleet 授权问题漏洞

Fleet is an open source device management platform from Fleet that supports a wide range of operating systems and devices to help IT and security teams with device management, vulnerability reporting, MDM, and more, free and flexible. An authorization issue vulnerability exists in Fleet versions...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: argo-rollouts-fips, ip-masq-agent, azuredisk-csi, emissary, spark-operator, calico-fips, argocd-image-updater, calico, azuredisk-csi-fips, cluster-autoscaler-fips, argocd-image-updater-fips, rancher-agent, kapp-fips, kubernetes-csi-driver-hostpath, spark-operator-fip...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, kubernetes, aws-efs-csi-driver, kubernetes-csi-driver-nfs, argocd-image-updater, emissary, nodetaint, vcluster, rancher-fleet, local-static-provisioner, ip-masq-agent, kapp, rancher-webhook, spark-operator, kubernetes-dns-node-cache,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: argo-rollouts-fips, ip-masq-agent, azuredisk-csi, emissary, spark-operator, calico-fips, argocd-image-updater, calico, azuredisk-csi-fips, cluster-autoscaler-fips, argocd-image-updater-fips, rancher-agent, kapp-fips, kubernetes-csi-driver-hostpath, spark-operator-fip...

CVE-2020-26276

Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutated by an attacker to modify the trusted document. This can result in allowing unverified logins from a SAML IdP. Users that configure Fleet...

The vulnerability of the server software for managing Elastic Agent agents, known as Elastic Fleet Server, stems from deficiencies in access control. This allows a malicious individual to disclose sensitive information that is protected by this system.

The vulnerability of the server software for managing Elastic Agent agents in Elastic Fleet Server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

BIT-KIBANA-2024-43707 Kibana exposure of sensitive information to an unauthorized actor

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions...

BIT-ELK-2024-43710 Kibana server-side request forgery

A server side request forgery vulnerability was identified in Kibana where the /api/fleet/healthcheck API could be used to send requests to internal endpoints. Due to the nature of the underlying request, only endpoints available over https that return JSON could be accessed. This can be carried...

CVE-2024-52975

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled...

CVE-2024-52975

The CVE-2024-52975 issue affects Elastic Fleet Server. Concrete details indicate that policies stored in Fleet Server could contain sensitive information and are logged at INFO/ERROR levels, with exposure depending on enabled integrations. From the Elastic ESA-2024-31 advisory (and related source...

CVE-2024-52975 Fleet Server sensitive information exposure via logs

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled...

CVE-2024-52975 Fleet Server sensitive information exposure via logs

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled...

CVE-2024-43707 Kibana exposure of sensitive information to an unauthorized actor

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions...