CVE-2021-43824

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured wit ...

Continue Reading
Zabbix – A Case Study of Unsafe Session Storage

![A critical vulnerability in the IT monitoring software Zabbix](https://images.prismic.io/sonarsource/a1691e38-7c8f-4e2e-add4-ae3675bb7489_RD-111+zabbix+use+case%402x.png?auto=compress,format) ## Int ...

Continue Reading
(RHSA-2022:1275) Important: Red Hat OpenShift Service Mesh 2.1.2 security update

Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. This advisory covers ...

Continue Reading
(RHSA-2022:1276) Important: Red Hat OpenShift Service Mesh 2.0.9 security update

Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. This advisory covers ...

Continue Reading
SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts

A [server-side request forgery (SSRF) flaw]() in an API of a large financial technology (fintech) platform potentially could have compromised millions of bank customers, allowing attackers to defraud ...

Continue Reading
CVE-2022-22332

IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user due to missing revocation mechanism for the JWT token. IBM X-Force ID: 219131.Read More ...

Continue Reading
(RHSA-2022:4690) Important: Red Hat OpenShift GitOps security update

Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Security Fix(es): * argocd: ArgoCD will blindly trust JWT claims if anonymous access is ...

Continue Reading
(RHSA-2022:4671) Important: Red Hat OpenShift GitOps security update

Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Security Fix(es): * argocd: ArgoCD will blindly trust JWT claims if anonymous access is ...

Continue Reading

Back to Main

Subscribe for the latest news: