CubeFS allows Kubernetes cluster-level privilege escalation

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-30512 · ADVISORY
• cubefs/cubefs · WEB
• cubefs/cubefs · PACKAGE

Altre vulnerabilità di github.com/cubefs/cubefs

• CVE-2023-46742MEDIO 6.5CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys…
• CVE-2023-46741CRITICO 9.8CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users…
• CVE-2023-46740CRITICO 9.8CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to genera…
• CVE-2023-46739MEDIO 5.9CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions prior…
• CVE-2023-46738MEDIO 6.5CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in versions prior to 3.3…