Vendors / Redpanda Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Redpanda records in CISA KEV No Redpanda vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00987 · Published 2023-12-17 · No fix listed CWE-862
Priority MEDIUM 58
Redpanda before 22.3.12 discloses cleartext AWS credentials.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00266 · Published 2023-02-13 · No fix listed CWE-522
Priority LOW 21
rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must re…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00594 · Published 2023-04-08 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
1 0 2 0 0
