CubeFS allows Kubernetes cluster-level privilege escalation

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-30512 · ADVISORY
• cubefs/cubefs · WEB
• cubefs/cubefs · PACKAGE

Mais vulnerabilidades de github.com/cubefs/cubefs

• CVE-2023-46742MÉDIO 6.5CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys…
• CVE-2023-46741CRÍTICO 9.8CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users…
• CVE-2023-46740CRÍTICO 9.8CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to genera…
• CVE-2023-46739MÉDIO 5.9CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions prior…
• CVE-2023-46738MÉDIO 6.5CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in versions prior to 3.3…