Vulnerabilitycritical
Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-38139 | Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network | 8.8 | <1% | ||
| CVE-2024-38190 | Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector | 8.6 | 1% | ||
| CVE-2024-38204 | Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network | 6.5 | <1% | ||
| CVE-2024-45216 | Authentication Bypass in Apache Solr PKIAuthenticationPlugin (CVE-2024-45216) | 9.8 | 92% | ||
CVE-2024-9486+1 related CVE | A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process | 9.8 group max | 2% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Oct 17, 2024 Vulnerability / Kubernetes A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain circumstances. The vulnerability, tracked as CVE-2024-9486 (CVSS score: 9. 8), has been addressed in version 0.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.