Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SUSE Longhorn 1.1.3 Clear all filters
TI-2021-14901 CVE-2021-36780

Unauthorized data access from replicas through vulnerable instance manager pods

Priority LOW 36

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a rep…

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00466 Published 2021-12-17 Fixed in 1.1.3, 1.2.3v CWE-306
TI-2021-14900 CVE-2021-36779

Host operations allowed in privileged Longhorn managed pods

Priority MEDIUM 42

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00686 Published 2021-12-17 Fixed in 1.1.3, 1.2.3 CWE-306