Lucene search

K
wolfiWolfiWOLFI:CVE-2024-6104
HistoryJun 28, 2024 - 3:21 p.m.

CVE-2024-6104 vulnerabilities

2024-06-2815:21:31
packages.wolfi.dev
10
cve-2024-6104
vulnerabilities
glab
gomplate
gitlab-shell
unix

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Vulnerabilities for packages: pulumi-kubernetes-operator, cert-manager, flux-image-reflector-controller, buildkitd, ksops, policy-controller, kubevela, terraform, gitsign, vault-csi-provider, cosign, flux-helm-controller, prometheus, fulcio, zot, aactl, keda, gh, vexctl, glab, tkn, bank-vaults, tekton-pipelines, flux-kustomize-controller, flux, external-dns, gitlab-runner, k3s, pulumi, rekor, spire-server, argo-cd, zarf, sops, nuclei, terragrunt, kubernetes-event-exporter, snyk-cli, timestamp-authority, k3d, consul, flux-source-controller, opentelemetry-collector-contrib, scorecard, skopeo, flux-image-automation-controller, slsa-verifier, gomplate, kargo, loki, neuvector-sigstore-interface, rook, terraform-provider-azurerm, goreleaser, kubescape, actions-runner-controller, gitlab-shell, guac, kyverno, rabbitmq-messaging-topology-operator, tekton-chains, falcoctl, opentofu, step-ca, influxd, grafana-mimir, flux-notification-controller, crossplane-provider-azure, sigstore-scaffolding, gitlab-kas

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%