Lucene search
+L

13 matches found

Chainguard
Chainguard
added 2026/08/14 8:24 a.m.35 views

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, cephcsi-fips, frankenphp-8.4, tofu-controller-fips, mlrun-log-collector-fips, crossplane-provider-aws-sns, tbot, crossplane-provider-azure-servicefabric, grafana-elasticsearch-datasource, crossplane-provider-aws-redshift-fips,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.20 views

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy-fips, pvc-autoresizer-fips, crossplane-provider-azure-relay, tflintenv, cert-manager-openshift-routes-fips, mig-parted, azcopy-fips, sqlexporter-fips, cephcsi-fips, agentbeat, nifikop, gatekeeper-fips, haproxy-ingress, flux-source-watcher,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/25 2:16 p.m.28 views

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: helm-operator-fips, harvester, external-secrets-fips, tekton-pipelines-fips, pulumi-kubernetes-operator, agentbeat, frankenphp-8.4, gatekeeper-fips, volcano-fips, tekton-chains-fips, opentelemetry-operator, kube-rbac-proxy-fips, kubescape-server,...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/06/04 12:16 p.m.19 views

CVE-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

7.1CVSS0.0022EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/06/04 12:04 p.m.16 views

CVE-2026-10840 Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

7.1CVSS5.8AI score0.0022EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/04 12:04 p.m.64 views

CVE-2026-10840

CVE-2026-10840 concerns the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role. When Kueue or cert-manager CRDs are present, any authenticated...

7.1CVSS5.8AI score0.0022EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/04 12:04 p.m.20 views

EUVD-2026-34248

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

9.6CVSS5.8AI score0.0022EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/04 12:04 p.m.90 views

CVE-2026-10840 Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

7.1CVSS0.0022EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/04 12:04 p.m.9 views

CVE-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

7.1CVSS5.8AI score0.0022EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/04 12:04 p.m.17 views

CVE-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...

7.1CVSS5.7AI score0.0022EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/04 12:00 a.m.23 views

PT-2026-46191

Name of the Vulnerable Software and Affected Versions OpenShift Pipelines operator affected versions not specified Description A flaw in the OpenShift Pipelines operator occurs because the tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue...

7.1CVSS5.5AI score0.0022EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2026/06/04 12:00 a.m.20 views

Red Hat OpenShift Pipelines 权限许可和访问控制问题漏洞

Red Hat OpenShift Pipelines is a Kubernetes-native continuous integration and continuous delivery platform developed by Red Hat Inc. There is a security vulnerability in Red Hat OpenShift Pipelines. This vulnerability stems from the ClusterRoleBinding for tekton-scheduler-rolebinding granting the...

7.1CVSS5.9AI score0.0022EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/09/29 5:39 p.m.11 views

CVE-2025-10725

A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the...

9.9CVSS6.2AI score0.00699EPSS
SaveExploits0References3
Rows per page
Query Builder