CVE-2024-7598

LOW Year: 2024
CVSS v3 Score
3.1
Low
Weakness Type
CWE-362
View all →

Vulnerability Description

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.

Related Vulnerabilities

CVE-2016-4583

LOW
CVSS:3.1(Low)

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing att...

CWE-3622016

CVE-2020-3894

LOW
CVSS:3.1(Low)

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Wi...

CWE-3622020

CVE-2021-24000

LOW
CVSS:3.1(Low)

A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements ...

CWE-3622021

CVE-2021-36181

LOW
CVSS:3.1(Low)

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, l...

CWE-3622021

CVE-2022-0279

LOW
CVSS:3.1(Low)

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the...

CWE-3622022

CVE-2022-36422

LOW
CVSS:3.1(Low)

Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress.

CWE-3622022