prometheus vulnerabilities (Red Hat)
50 vulnerabilities.
-
prometheusRed Hat Kubernetes man in the middle using LoadBalancer or ExternalIPs 6.3 Medium -
prometheusRed Hat CRLF injection in urllib3 6.5 Medium -
prometheusRed Hat Improper masking of some secrets in Jenkins Credentials Binding Plugin 4.3 Medium -
prometheusRed Hat Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps 6.5 Medium -
prometheusRed Hat Kubernetes API server denial of service 5.3 Medium -
prometheusRed Hat Jenkins REST APIs vulnerable to clickjacking 5.4 Medium -
prometheusRed Hat Memory usage graphs accessible to anyone with Overall/Read 4.3 Medium -
prometheusRed Hat Jenkins Diagnostic page exposed session cookies 5.4 Medium -
prometheusRed Hat Non-constant time HMAC comparison 5.3 Medium -
prometheusRed Hat Non-constant time comparison of inbound TCP agent connection secret 5.3 Medium -
prometheusRed Hat Jenkins vulnerable to UDP amplification reflection attack 5.8 Medium -
prometheusRed Hat Inbound TCP Agent Protocol/3 authentication bypass in Jenkins 8.6 High -
prometheusRed Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope 5.0 Medium -
prometheusRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
prometheusRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
prometheusRed Hat Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin 9.9 Critical -
prometheusRed Hat Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin 4.3 Medium -
prometheusRed Hat golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
prometheusRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
prometheusRed Hat Improper Neutralization of Input During Web Page Generation in Jenkins 5.4 Medium -
prometheusRed Hat Insufficient Session Expiration in Jenkins 8.1 High -
prometheusRed Hat kubectl cp path traversal 6.4 Medium -
prometheusRed Hat Withdrawn Advisory: Prometheus XSS Vulnerability 6.1 Medium -
prometheusRed Hat Jenkins Config File Provider Plugin XSS vulnerability 4.8 Medium -
prometheusRed Hat Cross-site Scripting in Jenkins Blue Ocean Plugin 5.4 Medium -
prometheusRed Hat Cross-Site Request Forgery in Jenkins Blue Ocean Plugin 6.5 Medium -
prometheusRed Hat Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS 8.1 High -
prometheusRed Hat Cross-Site Request Forgery in Jenkins Git Plugin 4.3 Medium -
prometheusRed Hat Improper Limitation of a Pathname to a Restricted Directory in Jenkins 6.5 Medium -
prometheusRed Hat Improper Authorization in Jenkins Core 7.2 High -
prometheusRed Hat Improper Authorization in Jenkins Core 7.2 High -
prometheusRed Hat Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability 8.8 High -
prometheusRed Hat Jenkins Groovy Plugin sandbox bypass vulnerability 8.8 High -
prometheusRed Hat Protection Mechanism Failure in Jenkins Script Security Plugin 8.8 High -
prometheusRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 7.8 High -
prometheusRed Hat Session Fixation in Jenkins 5.4 Medium -
prometheusRed Hat Improper Authorization in Jenkins 6.5 Medium -
prometheusRed Hat Cross-site Scripting in Jenkins 6.1 Medium -
prometheusRed Hat Path Traversal in Jenkins 6.5 Medium -
prometheusRed Hat An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1... 7.5 High -
prometheusRed Hat Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console... 9.8 Critical -
prometheusRed Hat An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,... 7.5 High -
prometheusRed Hat An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8... 7.5 High -
prometheusRed Hat Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass 8.8 High -
prometheusRed Hat Improper Privilege Management in Jenkins 8.8 High -
prometheusRed Hat Missing Release of Resource after Effective Lifetime in Jenkins 7.5 High -
prometheusRed Hat The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker... 5.0 Medium -
prometheusRed Hat A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin.... 6.5 Medium -
prometheusRed Hat The OpenShift image import whitelist failed to enforce restrictions correctly when running... 4.3 Medium -
prometheusRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 5.3 Medium