Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-36780

Unauthorized data access from replicas through vulnerable instance manager pods

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3v.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation
Products
Longhorn
CVE-2021-36779

Host operations allowed in privileged Longhorn managed pods

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed
Vendors
Linuxfoundation
Products
Longhorn