Skip to contentPagerduty Rundeck vulnerabilities
- pagerduty rundeckAuthenticated users can view or delete jobs they do not have authorization for in RundeckCVE-2023-48222Fix available8.1 High
- pagerduty rundeckAuthenticated users can view job names and groups they do not have authorization to view in RundeckCVE-2023-47112Fix available4.3 Medium
- pagerduty rundeckPlaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process AutomationCVE-2022-31044Fix available7.5 High
- pagerduty rundeckUse of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterpriseCVE-2022-291869.1 Critical
- pagerduty rundeckMissing Authorization in RundeckCVE-2021-411128.1 High
- pagerduty rundeckAuthorization Bypass Through User-Controlled Key in RundeckCVE-2021-411116.4 Medium
- pagerduty rundeckCross-Site Request Forgery (CSRF) can run untrusted code on Rundeck serverCVE-2021-39133Fix available7.2 High
- pagerduty rundeckYAML deserialization can run untrusted codeCVE-2021-39132Fix available8.8 High
- pagerduty rundeckIDOR can reveal execution data and logs to unauthorized user in RundeckCVE-2020-11009Fix available6.5 Medium
- pagerduty rundeckRundeck Community Edition vulnerable to Cross-site ScriptingCVE-2019-6804Public exploitFix available6.1 Medium