CVE-2023-5056

MEDIUM Year: 2023
CVSS v3 Score
4.1
Medium
Weakness Type
CWE-862
View all →

Vulnerability Description

A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of the user's purview.

Related Vulnerabilities

CVE-2019-0325

MEDIUM
CVSS:4.2(Medium)

SAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user...

CWE-8622019

CVE-2020-13464

MEDIUM
CVSS:4.2(Medium)

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

CWE-8622020

CVE-2022-3244

MEDIUM
CVSS:4.2(Medium)

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage t...

CWE-8622022

CVE-2023-24605

MEDIUM
CVSS:4.2(Medium)

OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading contact data, and renaming tokens.

CWE-8622023

CVE-2024-36036

MEDIUM
CVSS:4.2(Medium)

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.

CWE-8622024

CVE-2025-25081

MEDIUM
CVSS:4.2(Medium)

Missing Authorization vulnerability in DeannaS Embed RSS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Embed RSS: from n/a through 3.1.

CWE-8622025