CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

Privilege escalation

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-2530

CVE-2023-2530 is a remote code execution vulnerability in Puppet's orchestration service that enables privilege escalation. Public details across multiple sources indicate the issue affects Puppet Enterprise versions prior to 2021.0 in the 2021.x line and prior to 2023.2 in the 2023.x line (per N...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

PT-2023-20016 · Puppet +1 · Puppet Enterprise

Name of the Vulnerable Software and Affected Versions: Orchestration service affected versions not specified Description: A privilege escalation issue was discovered in the orchestration service, allowing remote code execution. Recommendations: At the moment, there is no information about a newer...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-30840

Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod controlled by the csi-nodeplugin-fluid...

CVE-2023-28842

CVE-2023-28842 affects Moby/dockerd, specifically Swarm overlay with encrypted VXLAN: an endpoint on an encrypted overlay can be unauthenticated, allowing cleartext VXLAN traffic to be injected or leaked under certain conditions. The issue stems from how iptables rules and IPsec handling are appl...

Moderate: Red Hat Bug Fix Advisory: Red Hat build of MicroShift 4.12.6 bug fix and enhancement update

Red Hat build of MicroShift release 4.12.6 is now available with updates to packages and images that fix several bugs. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built from the edge capabilities of Red Hat...

CVE-2023-26608

SOLDR System of Orchestration, Lifecycle control, Detection and Response 1.1.0 allows stored XSS via the module editor...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.4 security update

Red Hat build of MicroShift release 4.12.4 is now available with updates to packages and images that fix several bugs. This release includes a security update for the Red Hat build of MicroShift 4.12. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

SUSE CVE-2014-3473

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

F5 BIG-IP Windows Edge Client client DLL hijacking vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A DLL hijacking vulnerability exists in the F5 BIG-IP Windows Edge Client client, which can be exploited by an attacker to us...

F5 iControl SOAP elevation of privilege vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An elevation of privilege vulnerability exists in F5 iControl SOAP, which can be exploited by an authenticated attacker to...

F5 BIG-IP DNS profile denial of service vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP DNS profile, where the Rapid Response Mode RRM setting is turned on...

F5 BIG-IP AFM Denial of Service Vulnerability (CNVD-2023-05962)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP AFM, where undisclosed traffic could cause TMM to crash when an AFM NAT...

F5 BIG-IP APM Virtual Server Open Redirect Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An open redirection vulnerability exists in the F5 BIG-IP APM virtual server, which can be exploited by an unauthenticated...

F5 iControl REST and TMSH Privilege Management Improper Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 iControl REST and TMSH have improper privilege management, and an authenticated attacker with resource administrator role...