Calico Inserts Sensitive Information into Log File

In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the SERVICEACCOUNTTOKEN placeholder Canal/Flannel-Calico deployments, the installer substitutes the live Kubernetes ServiceAccount bearer token before logging,...

PT-2014-4918

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.8.2 Description The issue concerns the network interface configuration page, where remote administrators can execute arbitrary commands by using shell metacharacters in the address parameter. This allow...