Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25616
HistoryJun 05, 2020 - 6:37 a.m.

Man-in-the-Middle (MtiM)

2020-06-0506:37:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

19.5%

github.com/weaveworks/weave is vulnerable to man-in-the-middle attacks. IPv4 only clusters allows for MitM attacks via IPv6 rogue router advertisements if an attacker is able to run a process as root in a container and is able to respond to DNS requests from the host.

CPENameOperatorVersion
github.com/weaveworks/weavele2.6.2

0.001 Low

EPSS

Percentile

19.5%