CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2024-6535

CVE-2024-6535 — Skupper authentication bypass risk . The issue occurs when Skupper is initialized with console-enabled and console-auth set to OpenShift, configuring the OpenShift oauth-proxy with a static cookie-secret. Under certain circumstances, a specially-crafted cookie may bypass authentic...

CVE-2023-5056

CVE-2023-5056 involves the Skupper operator. A misconfiguration can enable creation of a service account that lets an authenticated attacker in a neighboring cluster view deployments across all namespaces, i.e., unauthorized access to information outside the user’s purview. The issue is tied to p...