46 matches found
The vulnerability of the Skupper package of the Red Hat Service Interconnect software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Skupper package of the Red Hat Service Interconnect software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Important: Red Hat Security Advisory: Red Hat Service Interconnect security update
An update is now available for Service Interconnect 1 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
Important: Red Hat Security Advisory: skupper-cli and skupper-router security update
An update for skupper-cli and skupper-router is now available for Service Interconnect 1 for RHEL 8 and Service Interconnect 1 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2023-5056
A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of...
Skupper skupper-operator security vulnerability
Skupper skupper-operator is a Kubernetes operator from the Skupper project. Skupper skupper-operator suffers from a security vulnerability that stems from the possibility of allowing a certain configuration to create a service account that allows an authenticated attacker in a neighboring cluster...
PT-2023-7534 · Unknown · Skupper Operator
Name of the Vulnerable Software and Affected Versions: Skupper operator affected versions not specified Description: A flaw in the Skupper operator may allow an authenticated attacker in an adjacent cluster to view deployments in all namespaces, permitting unauthorized access to information outsi...