Cncf

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Cncf records in CISA KEV

No Cncf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crossplane 2 records MEDIUM Spire 2 records LOW Portmap 1 record LOW

Records

2 records in Spire · all components

TI-2021-08667 CVE-2021-27098 · GHSA-h746-rm5q-8mgq

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1…

LOW 36

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 cer…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00558 Published 2021-03-05 Fixed in 0.8.5, 0.9.4 +3 CWE-295

TI-2021-08668 CVE-2021-27099

In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node…

LOW 31

In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary…

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00722 Published 2021-03-05 No fix listed CWE-863

Open these records in search →

Critical	1
High	2
Medium	1
Low	1
No CVSS	0