Database/Control plane, storage & DevOps
Netdata: Agent MACHINE GUID is readable and reusable
CVSS 6.5CVE-2023-22497Control plane, storage & DevOpscurated
Impact
Agent MACHINE GUID is readable and reusable -> impersonate an agent to the registry/parent
Who can reach it
Network (remote)
What to do
Data-plane: Netdata agents run on GPU nodes - fleet-wide agent upgrade
References
Related entries
- Apache Guacamole: Miscalculated instruction lengths during the Guacamole handshakeCVE-2023-30575 · Apache GuacamoleMedium
- Elasticsearch: Crafted _search query stringCVE-2023-31419 · ElasticsearchMedium
- Argo CD: repo-server extracts a user-controlled tar.gz without size validationCVE-2023-40584 · Argo CDMedium
- Samba: SMB client can truncate files despite read-only permissions when acl_xattr ignores system ACLsCVE-2023-4091 · SambaMedium
- Ceph RGW (IBM Spectrum Fusion HCI): Improper bucket access lets an actor perform unauthorized actions in RGWCVE-2023-43040 · Ceph RGW (IBM Spectrum Fusion HCI)Medium
- Keycloak: Regex complexity in SearchQueryUtilsCVE-2024-10270 · KeycloakMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.