Linux / Cubefs
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-46742 | CubeFS leaks users key in logs | MEDIUM | 5.1 | Jan 3, 2024 |
| CVE-2023-46741 | CubeFS leaks magic secret key when starting Blobstore access service | MEDIUM | 5.1 | Jan 3, 2024 |
| CVE-2023-46740 | Insecure random string generator used for sensitive data | HIGH | 8.2 | Jan 3, 2024 |
| CVE-2023-46739 | Timing attack can leak user passwords | HIGH | 8.2 | Jan 3, 2024 |
| CVE-2023-46738 | Authenticated users can crash the CubeFS servers with maliciously crafted requests | HIGH | 7.1 | Jan 3, 2024 |
| CVE-2023-30512 | CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets… | MEDIUM | 6.5 | Apr 12, 2023 |
Showing 1 to 6 of 6 CVEs