Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-36780

Unauthorized data access from replicas through vulnerable instance manager pods

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3v.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Longhorn

  • longhorn to < 1.1.3affected

SUSE Longhorn

  • longhorn to < 1.2.3vaffected

References