Weave

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Weave records in CISA KEV

No Weave vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weave Gitops 3 records MEDIUM Gitops Tools 2 records MEDIUM Cloud Agent 1 record MEDIUM Gitops Terraform Controller 1 record LOW Weave 1 record LOW Weave Desktop 1 record LOW Weave Net 1 record LOW

Records

1 record in Weave Net · all components

TI-2020-08965 CVE-2020-11091 · GHSA-59qg-grp7-5r73

Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

LOW 28

In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service.

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.0086 Published 2020-06-03 Fixed in 2.6.3 CWE-350

Open these records in search →

Critical	4
High	5
Medium	1
Low	0
No CVSS	0