linuxfoundation cubefs vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an malicious user to predict and/or gue...

Linuxfoundation Cubefs

9.8

CVSSv3

CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in plaintext format in the...

Linuxfoundation Cubefs

6.5

CVSSv3

CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys in the logs in multiple components. When CubeCS creates new users, it leaks the users secret key. This could allow a lower-privileged user ...

Linuxfoundation Cubefs

6.5

CVSSv3

CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in versions before 3.3.1 that could allow authenticated users to send maliciously-crafted requests that would crash the ObjectNode and deny other users from using i...

Linuxfoundation Cubefs

6.5

CVSSv3

CubeFS up to and including 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.

Linuxfoundation Cubefs

5.9

CVSSv3

CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions before 3.3.1 that could allow an untrusted malicious user to steal user passwords by carrying out a timing attack. The root case of the vulnerabi...

Linuxfoundation Cubefs

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook