Cubefs (Linuxfoundation) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2024-01-03. Vendor: Linuxfoundation.

CVEs of Cubefs

• CVE-2023-46742 - CVSS 6.5 (medium), 2024-01-03: CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys in the logs in…
• CVE-2023-46740 - CVSS 9.8 (critical), 2024-01-03: CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific,…
• CVE-2023-46739 - CVSS 6.5 (medium), 2024-01-03: CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions prior to 3.3.1 that…
• CVE-2023-46741 - CVSS 9.8 (critical), 2024-01-03: CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive…
• CVE-2023-46738 - CVSS 6.5 (medium), 2024-01-03: CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in versions prior to 3.3.1 that could…
• CVE-2023-30512 - CVSS 6.5 (medium), 2023-04-12: CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all…