Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the handling of HTTP responses in the UI, Logviewer, and DRPC components. An attacker can access sensitive cluster, topology, and log data by enticing an authenticated user to visit a malicious web page that...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to improper enforcement of access controls in the Logviewer process. An attacker can gain unauthorized access to sensitive daemon log files and metadata by sending requests to the affected endpoints after passi...