Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-56453 State: PUBLISHED Published: 2025-01-08T03:18:32.152Z Last Updated: 2025-01-08T15:21:45.591Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/1/
CVE ID: CVE-2024-56454 State: PUBLISHED Published: 2025-01-08T03:21:46.204Z Last Updated: 2025-01-08T14:44:27.964Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/1/
CVE ID: CVE-2024-56455 State: PUBLISHED Published: 2025-01-08T03:22:45.758Z Last Updated: 2025-01-08T14:43:54.839Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/1/
CVE ID: CVE-2024-56456 State: PUBLISHED Published: 2025-01-08T03:23:40.211Z Last Updated: 2025-01-08T14:43:17.604Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/1/
CVE ID: CVE-2024-56463 State: PUBLISHED Published: 2025-02-14T16:14:40.232Z Last Updated: 2025-08-25T22:33:35.220Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183251
CVE ID: CVE-2024-56467 State: PUBLISHED Published: 2025-02-06T20:30:45.432Z Last Updated: 2025-02-22T22:13:01.190Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182693
CVE ID: CVE-2024-56468 State: PUBLISHED Published: 2025-07-08T22:41:47.826Z Last Updated: 2025-08-24T11:20:33.902Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: InfoSphere Data Replication VSAM for z/OS Remote Source Problem Types: CWE-121 Description: IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7239221
CVE ID: CVE-2024-56469 State: PUBLISHED Published: 2025-03-27T14:32:51.723Z Last Updated: 2025-09-01T10:14:14.162Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-306 Description: IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229031
CVE ID: CVE-2024-56470 State: PUBLISHED Published: 2025-02-05T22:53:15.182Z Last Updated: 2025-02-22T22:13:38.955Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Aspera Shares Problem Types: CWE-918 Description: IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182490
CVE ID: CVE-2024-56471 State: PUBLISHED Published: 2025-02-05T22:55:49.472Z Last Updated: 2025-02-22T22:14:07.088Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Aspera Shares Problem Types: CWE-918 Description: IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182490
CVE ID: CVE-2024-56472 State: PUBLISHED Published: 2025-02-05T22:58:39.405Z Last Updated: 2025-02-22T22:14:37.136Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Shares Problem Types: CWE-79 Description: IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182490
CVE ID: CVE-2024-56473 State: PUBLISHED Published: 2025-02-05T23:01:29.837Z Last Updated: 2025-02-22T22:15:04.704Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Aspera Shares Problem Types: CWE-117 Description: IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182490
CVE ID: CVE-2024-56474 State: PUBLISHED Published: 2025-04-02T15:31:47.380Z Last Updated: 2025-09-01T00:57:51.214Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: CWE-352 Description: IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229880
CVE ID: CVE-2024-56475 State: PUBLISHED Published: 2025-04-02T15:32:42.638Z Last Updated: 2025-09-01T00:56:57.444Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: CWE-79 Description: IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229880
CVE ID: CVE-2024-56476 State: PUBLISHED Published: 2025-04-02T15:33:44.634Z Last Updated: 2025-09-01T00:57:21.775Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: CWE-204 Description: IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login attempt response discrepancy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229880
CVE ID: CVE-2024-56477 State: PUBLISHED Published: 2025-02-14T14:49:45.839Z Last Updated: 2025-02-14T14:56:48.942Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Power Hardware Management Console Problem Types: CWE-22 Description: IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183224
CVE ID: CVE-2024-56493 State: PUBLISHED Published: 2025-02-27T14:47:54.610Z Last Updated: 2025-02-27T15:33:58.634Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56494 State: PUBLISHED Published: 2025-02-27T14:47:43.601Z Last Updated: 2025-02-27T15:44:54.998Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56495 State: PUBLISHED Published: 2025-02-27T14:48:20.148Z Last Updated: 2025-02-27T15:24:25.976Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56496 State: PUBLISHED Published: 2025-02-27T14:48:33.758Z Last Updated: 2025-02-27T15:15:21.962Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: EntireX Problem Types: CWE-209 Description: IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184194
CVE ID: CVE-2024-56497 State: PUBLISHED Published: 2025-01-14T14:09:27.433Z Last Updated: 2025-01-14T20:55:21.625Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiMail, FortiRecorder Problem Types: CWE-78 Description: An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0.0 and 6.4.0 through 6.4.4 allows attacker to execute unauthorized code or commands via the CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.
e or commands via the CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-170
CVE ID: CVE-2024-56498 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:02.284Z Description: No description available.
CVE ID: CVE-2024-56499 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:01.805Z Description: No description available.
CVE ID: CVE-2024-56500 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:01.160Z Description: No description available.
CVE ID: CVE-2024-56501 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:00.684Z Description: No description available.
CVE ID: CVE-2024-56502 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:00.223Z Description: No description available.
CVE ID: CVE-2024-56503 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:37:59.676Z Description: No description available.
CVE ID: CVE-2024-56504 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:37:59.228Z Description: No description available.
CVE ID: CVE-2024-56505 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:37:58.793Z Description: No description available.
CVE ID: CVE-2024-56506 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:37:58.345Z Description: No description available.
CVE ID: CVE-2024-56507 State: PUBLISHED Published: 2024-12-27T15:50:09.784Z Last Updated: 2024-12-27T21:01:15.817Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Kovah Products: LinkAce Problem Types: CWE-79 Description: LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a reflected cross-site scripting (XSS) vulnerability exists in the LinkAce. This issue occurs in the "URL" field of the "Edit Link" module, where user input is not properly sanitized or encoded before being reflected in the HTML response. This allows attackers to inject and execute arbitrary JavaScript in the context of the victim’s browser, leadin
esponse. This allows attackers to inject and execute arbitrary JavaScript in the context of the victim’s browser, leading to potential session hijacking, data theft, and unauthorized actions. This vulnerability is fixed in 1.15.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GHSA-cjcg-wj4p-pgc5 - https://github.com/Kovah/LinkAce/commit/c7cd6a323a03ccd89c7f905f7d9f2afc265b7b67
CVE ID: CVE-2024-56508 State: PUBLISHED Published: 2024-12-27T15:52:57.644Z Last Updated: 2024-12-27T20:58:58.230Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: Kovah Products: LinkAce Problem Types: CWE-434 Description: LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a file upload vulnerability exists in the LinkAce. This issue occurs in the "Import Bookmarks" functionality, where malicious HTML files can be uploaded containing JavaScript payloads. These payloads execute when the uploaded links are accessed, leading to potential reflected or persistent XSS scenarios. This vulnerability is fixed in 1.15.6. Additi
are accessed, leading to potential reflected or persistent XSS scenarios. This vulnerability is fixed in 1.15.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kovah/LinkAce/security/advisories/GHSA-2wvv-4576-8862 - https://github.com/Kovah/LinkAce/commit/8cf3670d71a8629d33408da76f9d441a1aa933f6
CVE ID: CVE-2024-56509 State: PUBLISHED Published: 2024-12-27T15:56:04.490Z Last Updated: 2024-12-27T20:55:14.288Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: dgtlmoon Products: changedetection.io Problem Types: CWE-200, CWE-22 Description: changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Improper input validation in the application can allow attackers to perform local file read (LFR) or path traversal attacks. These vulnerabilities occur when user input is used to construct file paths without adequate sanitization or validation. For example, using file:../../../etc/passwd or fil
to construct file paths without adequate sanitization or validation. For example, using file:../../../etc/passwd or file: ///etc/passwd can bypass weak validations and allow unauthorized access to sensitive files. Even though this has been addressed in previous patch, it is still insufficient. This vulnerability is fixed in 0.48.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-j5vv-6wjg-cfr8 - https://github.com/dgtlmoon/changedetection.io/commit/f7e9846c9b40a229813d19cdb66bf60fbe5e6a2a
CVE ID: CVE-2024-56510 State: PUBLISHED Published: 2024-12-26T20:56:24.743Z Last Updated: 2024-12-27T16:47:08.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: marp-team Products: marp-core Problem Types: CWE-79 Description: @marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting (XSS) due to improper neutralization of HTML sanitization. Marp Core v3.9.1 and v4.0.1 have been patched to fix that. If you are unable to update the package immediately, disable all HTML tags by setting html: false option in the Marp class
you are unable to update the package immediately, disable all HTML tags by setting html: false option in the Marp class constructor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/marp-team/marp-core/security/advisories/GHSA-x52f-h5g4-8qv5 - https://github.com/marp-team/marp-core/pull/282 - https://github.com/marp-team/marp-core/commit/61a1def244d1b6faa8e2c0be97ec0b68cab3ab49 - https://github.com/marp-team/marp-core/releases/tag/v3.9.1 - https://github.com/marp-team/marp-core/releases/tag/v4.0.1
CVE ID: CVE-2024-56511 State: PUBLISHED Published: 2025-01-10T15:19:13.173Z Last Updated: 2025-01-10T16:40:28.039Z Vendors: dataease Products: dataease Problem Types: CWE-289 Description: DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause the risk of unauthorized access. In the io.dataease.auth.filter.TokenFilter class, ”request.getRequestURI“ is used to obtain the request URL, and it is passed to the "WhitelistUtils.match" method to determine whether the URL request is an interface that does not require authentication. The "match" method filters
d to determine whether the URL request is an interface that does not require authentication. The "match" method filters semicolons, but this is not enough. When users set "server.servlet.context-path" when deploying products, there is still a risk of being bypassed, which can be bypassed by any whitelist prefix /geo/../context-path/. The vulnerability has been fixed in v2.10.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-9f69-p73j-m73x
CVE ID: CVE-2024-56512 State: PUBLISHED Published: 2024-12-28T16:18:46.112Z Last Updated: 2024-12-30T16:12:25.287Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: CWE-638 Description: Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases where the Process Group did not reference any Parameter values, the framework did not check user authorization for the bound Parameter Context. Missing authorization for a bound Parameter Context en
did not check user authorization for the bound Parameter Context. Missing authorization for a bound Parameter Context enabled clients to download non-sensitive Parameter values after creating the Process Group. Creating a new Process Group can also include referencing existing Controller Services or Parameter Providers. The framework did not check user authorization for referenced Controller Services or Parameter Providers, enabling clients to create Process Groups and use these components that were otherwise unauthorized. This vulnerability is limited in scope to authenticated users authorized to create Process Groups. The scope is further limited to deployments with component-based authori
ated users authorized to create Process Groups. The scope is further limited to deployments with component-based authorization policies. Upgrading to Apache NiFi 2.1.0 is the recommended mitigation, which includes authorization checking for Parameter and Controller Service references on Process Group creation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/cjc8fns5kjsho0s7vonlnojokyfx47wn
CVE ID: CVE-2024-56513 State: PUBLISHED Published: 2025-01-03T16:11:51.629Z Last Updated: 2025-01-03T17:22:04.247Z Vendors: karmada-io Products: karmada Problem Types: CWE-266 Description: Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the `karmadactl register` command have excessive privileges to access control plane resources. By abusing these permissions, an attacker able to authenticate as the karmada-agent to a karmada cluster would be able to obtain administrative privileges over the entire federation system including all register
rmada cluster would be able to obtain administrative privileges over the entire federation system including all registered member clusters. Since Karmada v1.12.0, command `karmadactl register` restricts the access permissions of pull mode member clusters to control plane resources. This way, an attacker able to authenticate as the karmada-agent cannot control other member clusters in Karmada. As a workaround, one may restrict the access permissions of pull mode member clusters to control plane resources according to Karmada Component Permissions Docs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/karmada-io/karmada/security/advisories/GHSA-mg7w-c9x2-xh7r
es: - CISA ADP Vulnrichment: References: - https://github.com/karmada-io/karmada/security/advisories/GHSA-mg7w-c9x2-xh7r - https://github.com/karmada-io/karmada/pull/5793 - https://github.com/karmada-io/karmada/commit/2c82055c4c7f469411b1ba48c4dba4841df04831 - https://karmada.io/docs/administrator/security/component-permission
CVE ID: CVE-2024-56514 State: PUBLISHED Published: 2025-01-03T16:15:56.917Z Last Updated: 2025-01-03T17:17:33.106Z Vendors: karmada-io Products: karmada Problem Types: CWE-22 Description: Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, both in karmadactl and karmada-operator, it is possible to supply a filesystem path, or an HTTP(s) URL to retrieve the custom resource definitions(CRDs) needed by Karmada. The CRDs are downloaded as a gzipped tarfile and are vulnerable to a TarSlip vulnerability. An attacker able to supply a malicious CRD file into a Karmada initialization coul