59804 matches found
observability Operator 安全漏洞
observability Operator is a Red Hat Observability open source software for creating required monitoring stacks on Kubernetes clusters. A security vulnerability exists in observability Operator that stems from the creation of a ServiceAccount with a ClusterRole, which could lead to elevated...
CVE-2025-27817 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, logstash, wildfly, opensearch, apache-nifi, thingsboard, zipkin, druid, apicurio-registry...
GHSA-VGQ5-3255-V292 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, logstash, wildfly, opensearch, apache-nifi, thingsboard, zipkin, druid, apicurio-registry...
CVE-2025-27817 vulnerabilities
Vulnerabilities for packages: apache-nifi, opensearch, prometheus-jmx-exporter, zipkin, thingsboard, strimzi-kafka-operator, logstash, druid, apicurio-registry, wildfly...
GHSA-VGQ5-3255-V292 vulnerabilities
Vulnerabilities for packages: apache-nifi, opensearch, prometheus-jmx-exporter, zipkin, thingsboard, strimzi-kafka-operator, logstash, druid, apicurio-registry, wildfly...
CVE-2025-48937 matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. matrix-sdk-crypto since version 0.8.0 and up to 0.11.0 does not correctly validate the sender of an encrypted event. Accordingly, a malicious homeserver operator can modify events served to clients, making those event...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.16.4
The 1.16.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.16.4 release of Red Hat OpenShift Pipelines Operator...
Iranian Robbinhood Ransomware Operator Pleads Guilty in US City Attacks
Iranian Robbinhood ransomware operator pleads guilty to major US city attacks, crippling services in Baltimore, Greenville, and more since 2019...
SUSE CVE-2025-4057
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies...
GO-2025-3717 ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator...
GHSA-WXR5-93PH-8WR9 vulnerabilities
Vulnerabilities for packages: tez, strimzi-kafka-operator, cassandra-reaper, celeborn, wildfly, akhq, sonarqube, jenkins, opensearch, apache-nifi, jenkins-plugin-manager, apache-activemq-artemis, spdx-tools-java, druid, apicurio-registry, trino, confluent-common-docker...
CVE-2025-48734 vulnerabilities
Vulnerabilities for packages: trino, ghidra, kafka, prometheus-jmx-exporter, wildfly, apache-nifi, celeborn, sonarqube, akhq, spdx-tools-java, strimzi-kafka-operator, tez, jenkins, hadoop-client-modules, apache-activemq-artemis, camunda-zeebe, cassandra-reaper, apicurio-registry,...
Credential Reuse Attack
github.com/arkmq-org/activemq-artemis-operator is vulnerable to Credential Reuse Attack. The vulnerability is due to improper password management where the activemq-artemis-operator generating static passwords that do not regenerate between separate CR dependencies, which allows an attacker to ga...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.1
The 1.18.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.1 release of Red Hat OpenShift Pipelines Operator...
activemq-artemis-operator: AMQ Broker Operator Starting Credentials Reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies...
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies...
CVE-2025-4057 Activemq-artemis-operator: amq broker operator starting credentials reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies...
CVE-2025-4057
CVE-2025-4057 affects ActiveMQ Artemis AMQ Broker Operator. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies, enabling potential credential reuse of starting credentials. CVSS 3.1 base score 5.5 (Local, Low Privilege, No User Interaction; C...
CVE-2025-4057 Activemq-artemis-operator: amq broker operator starting credentials reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies...
