CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41435
https://notcve.org/view.php?id=CVE-2024-41435
03 Sep 2024 — YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter. • https://gist.github.com/ycybfhb/1427881e7db911786837d32b0669e06b • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-6002 – Log Injection
https://notcve.org/view.php?id=CVE-2023-6002
07 Nov 2023 — YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs. YugabyteDB es vulnerable a Cross-Site Scripting (XSS) mediante inyección de registros. Escribir entradas de usuario invalidadas en archivos de registro puede permitir que un atacante falsifique entradas de registro o inyecte contenido malicioso en los registros. YugabyteDB is vulnerable to cros... • https://www.yugabyte.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-117: Improper Output Neutralization for Logs •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-6001 – Prometheus Metrics Accessible Pre-Authentication
https://notcve.org/view.php?id=CVE-2023-6001
07 Nov 2023 — Prometheus metrics are available without authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment. Las métricas de Prometheus están disponibles sin autenticación. Estos exponen información detallada y confidencial sobre el entorno YugabyteDB Anywhere. Prometheus metrics are available without authentication. • https://www.yugabyte.com • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-862: Missing Authorization •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-4640 – Set Logging Level Without Authentication
https://notcve.org/view.php?id=CVE-2023-4640
30 Aug 2023 — The controller responsible for setting the logging level does not include any authorization checks to ensure the user is authenticated. This can be seen by noting that it extends Controller rather than AuthenticatedController and includes no further checks. This issue affects YugabyteDB Anywhere: from 2.0.0 through 2.17.3 El controlador responsable de establecer el nivel de registro no incluye ninguna comprobación de autorización para garantizar que el usuario está autenticado. Esto puede verse observando q... • https://www.yugabyte.com • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 0%CPEs: 5EXPL: 0CVE-2023-0575 – Remote Code Execution
https://notcve.org/view.php?id=CVE-2023-0575
09 Feb 2023 — External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.0.0 • https://www.yugabyte.com • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-642: External Control of Critical State Data •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-0745 – Arbitrary File Write in High Availability Backup Upload
https://notcve.org/view.php?id=CVE-2023-0745
09 Feb 2023 — The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is associated with program files PlatformReplicationManager.Java. This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0 The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is a... • https://www.yugabyte.com • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-0574 – Server-Side Request Forgery
https://notcve.org/view.php?id=CVE-2023-0574
09 Feb 2023 — Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0.0.0 through 2.13.0.0 • https://www.yugabyte.com • CWE-307: Improper Restriction of Excessive Authentication Attempts CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-37397 – The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory
https://notcve.org/view.php?id=CVE-2022-37397
12 Aug 2022 — An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password. Se ha detectado un problema en YugabyteDB versión 2.6.1, cuando es usada la autenticación basada en LDAP en YCQL con el Directorio Activo de Microsoft. Cuando es habilitada la vinculación anónima o no autenticada de LDAP, permite omitir la autenticación con una cont... • https://www.yugabyte.com • CWE-16: Configuration CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 60EXPL: 0CVE-2019-3800 – CF CLI writes the client id and secret to config file
https://notcve.org/view.php?id=CVE-2019-3800
05 Aug 2019 — CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials. La CLI de CF anterior a versión v6.45.0 (versión de lanzamiento bosh 1.16.0), escribe el id y el secreto del cliente hacia su archivo de configuración cuando el usuario se autentica con el flag --... • https://pivotal.io/security/cve-2019-3800 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-522: Insufficiently Protected Credentials •