CVE-2021-36779

CVE-2021-36779 is a Missing Authentication for Critical Function in SUSE Longhorn. Affected: Longhorn before 1.1.3 and before 1.2.3. Root cause: lack of authentication allows any workload to execute binaries in an image on the host. Impact: workload compromise of host binaries across the cluster....

CVE-2021-36780

SUSE Longhorn CVE-2021-36780 is a Missing Authentication for Critical Function vulnerability due to improper access control in the longhorn-engine replica. Exploitation allows an attacker to connect to a replica instance and read/write data that should be protected. Affected versions are SUSE Lon...