github.com/cubefs/cubefs vulnerabilities (Go)

6 vulnerabilities.

• github.com/cubefs/cubefs Go CubeFS leaks users key in logs CVE-2023-46742 Fix available 4.8 MediumJanuary 3, 2024
• github.com/cubefs/cubefs Go CubeFS leaks magic secret key when starting Blobstore access service CVE-2023-46741 Fix available 4.8 MediumJanuary 3, 2024
• github.com/cubefs/cubefs Go Insecure random string generator used for sensitive data CVE-2023-46740 Fix available 6.5 MediumJanuary 3, 2024
• github.com/cubefs/cubefs Go Timing attack can leak user passwords CVE-2023-46739 Fix available 6.5 MediumJanuary 3, 2024
• github.com/cubefs/cubefs Go Authenticated users can crash the CubeFS servers with maliciously crafted requests CVE-2023-46738 Fix available 6.5 MediumJanuary 3, 2024
• github.com/cubefs/cubefs Go CubeFS allows Kubernetes cluster-level privilege escalation CVE-2023-30512 6.5 MediumApril 12, 2023