CVE-2021-36780

 

Published at: - 17-12-2021 10:15

Last modified: - 19-01-2023 02:15

Total changes: - 5

Description

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3v.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

 

Verification logic

 

Reference

• https://github.com/longhorn/longhorn/security/advisories/GHSA-g358-m2wp-mhhx
• https://bugzilla.suse.com/show_bug.cgi?id=1191819

 

Keywords

NVD

 

CVE-2021-36780

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures