Vulnerabilities

TI-2023-27863 CVE-2023-50976 · GHSA-v5cv-j9qw-9f6c

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.

HIGH 82

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00987 Published 2023-12-17 No fix listed CWE-862

TI-2023-14291 CVE-2023-30450 · GHSA-x3pf-j9xx-29g6

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to…

LOW 21

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must re…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00594 Published 2023-04-08 No fix listed CWE-20

TI-2023-10227 CVE-2023-24619 · GHSA-vjcp-9w44-9j8q

Redpanda before 22.3.12 discloses cleartext AWS credentials.

MEDIUM 58

Redpanda before 22.3.12 discloses cleartext AWS credentials.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00266 Published 2023-02-13 No fix listed CWE-522

Vulnerabilities

Filters

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to…

Redpanda before 22.3.12 discloses cleartext AWS credentials.