Don’t Let API Leaks Sink Your Ship | API Security Newsletter

🗓️ 02 Feb 2023 14:24:48Reported by grahar12Type

wallarmlab🔗 lab.wallarm.com👁 102 Views

Leaks of API keys and other secrets poses significant security risks in 202

Reporter	Title	Published	Views	Family All 103
Huntr	JwtSigKey hardcoded causes the k8s cluster to take over	2 Jan 202312:45	–	huntr
BDU FSTEC	The vulnerability of the SAP NetWeaver AS for Java software platform, related to access control deficiencies, allows an intruder to gain read-only access to data.	13 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software platform for container deployment in the SUSE Rancher Wrangler production environment, related to unencrypted storage of user data, allows a perpetrator to gain unauthorized access to protected information.	1 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application programming interface for the declarative delivery tool for GitOps for Kubernetes Argo CD lies in authentication errors, which allow a perpetrator to bypass established access controls.	16 Sep 202300:00	–	bdu_fstec
Circl	CVE-2022-23739	17 Jan 202322:15	–	circl
Circl	CVE-2022-43757	7 Feb 202316:24	–	circl
Circl	CVE-2023-0017	10 Jan 202307:28	–	circl
Circl	CVE-2023-22463	4 Jan 202318:18	–	circl
Circl	CVE-2023-22482	27 Jan 202300:47	–	circl
CNNVD	Izanami 信任管理问题漏洞	14 Jan 202300:00	–	cnnvd

02 Feb 2023 14:24Current

9.6High risk

Vulners AI Score9.6

EPSS0.69667

api security leaked secrets development breaches threat intelligence t-mobile breach