Hive Pro Achieves ISO/IEC 27001: 2022 Certification

Hive Pro has achieved ISO 27001: 2022 Certification, Demonstrating A Continuous Commitment to Excellence in Information Security August 8th, 2023 - HERNDON, VA: Hive Pro, a pioneer in the Threat Exposure Management market, is thrilled to announce that they have successfully attained ISO 27001:202...

JumpCloud Blames 'Sophisticated Nation-State' Actor for Security Breach

A little over a week after JumpCloud reset API keys of customers impacted by a security incident, the company said the intrusion was the work of a sophisticated nation-state actor. The adversary "gained unauthorized access to our systems to target a small and specific set of our customers," Bob...

SUSE CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

Privilege escalation

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-2530

CVE-2023-2530 is a remote code execution vulnerability in Puppet's orchestration service that enables privilege escalation. Public details across multiple sources indicate the issue affects Puppet Enterprise versions prior to 2021.0 in the 2021.x line and prior to 2023.2 in the 2023.x line (per N...

CVE-2023-2530

Removed by vendor...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

PT-2023-20016 · Puppet +1 · Puppet Enterprise

Name of the Vulnerable Software and Affected Versions: Orchestration service affected versions not specified Description: A privilege escalation issue was discovered in the orchestration service, allowing remote code execution. Recommendations: At the moment, there is no information about a newer...

CVE-2023-2530

A privilege escalation allowing remote code execution was discovered in the orchestration service...

CVE-2023-30840

Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod controlled by the csi-nodeplugin-fluid...

CVE-2023-28842

CVE-2023-28842 affects Moby/dockerd, specifically Swarm overlay with encrypted VXLAN: an endpoint on an encrypted overlay can be unauthenticated, allowing cleartext VXLAN traffic to be injected or leaked under certain conditions. The issue stems from how iptables rules and IPsec handling are appl...

Moderate: Red Hat Bug Fix Advisory: Red Hat build of MicroShift 4.12.6 bug fix and enhancement update

Red Hat build of MicroShift release 4.12.6 is now available with updates to packages and images that fix several bugs. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built from the edge capabilities of Red Hat...

CVE-2023-26608

SOLDR System of Orchestration, Lifecycle control, Detection and Response 1.1.0 allows stored XSS via the module editor...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.4 security update

Red Hat build of MicroShift release 4.12.4 is now available with updates to packages and images that fix several bugs. This release includes a security update for the Red Hat build of MicroShift 4.12. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

SUSE CVE-2014-3473

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

F5 iControl SOAP elevation of privilege vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An elevation of privilege vulnerability exists in F5 iControl SOAP, which can be exploited by an authenticated attacker to...

F5 iControl REST and TMSH Privilege Management Improper Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 iControl REST and TMSH have improper privilege management, and an authenticated attacker with resource administrator role...

F5 BIG-IP Windows Edge Client client DLL hijacking vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A DLL hijacking vulnerability exists in the F5 BIG-IP Windows Edge Client client, which can be exploited by an attacker to us...