CWE-1259

Total CVEs
3
Vulnerabilities
Avg CVSS v3
7.0
High
Latest CVE
2024
Most Recent

Severity Distribution

Critical 1
33.3%
High 0
0%
Medium 2
66.7%
Low 0
0%

External References

MITRE CWE
Official CWE definition
NIST NVD
Search CVEs by CWE

All CVEs (3)

Page 1 of 1

CVE-2024-36533

CRITICAL
CVSS:9.8(Critical)

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CWE-12592024

CVE-2024-36111

MEDIUM
CVSS:6.3(Medium)

KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a ...

CWE-12592024

CVE-2024-41948

MEDIUM
CVSS:5.0(Medium)

biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures. Third-party blocks can be generated without transferring the whole token ...

CWE-12592024