跳转到帖子

SUSE: CVE-2024-9486: SUSE Linux Security Advisory

recommended_posts

发布于
  • Members

SUSE: CVE-2024-9486: SUSE Linux Security Advisory

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
10/15/2024
Created
01/01/2025
Added
12/31/2024
Modified
01/28/2025

Description

A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be accessible via these default credentials. The credentials can be used to gain root access. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project with its Proxmox provider.

Solution(s)

  • suse-upgrade-govulncheck-vulndb

References

  • https://attackerkb.com/topics/cve-2024-9486
  • CVE - 2024-9486
  • 查看数 693
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…