Edgexfoundry vulnerabilities

Products

• Edgex Foundry 3
• Edgex-go 2

Newest

• edgexfoundry edgex foundry, edgex-go +1 more Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users CVE-2022-31066 Fix available 5.9 MediumJune 14, 2022
• edgexfoundry app-functions-sdk-go, edgex foundry, app service configurable +1 more +3 more Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors CVE-2021-41278 Public exploitFix available 5.4 MediumNovember 18, 2021
• edgexfoundry edgex foundry, edgex-go +1 more Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authen… CVE-2021-32753 8.3 HighJuly 9, 2021