Known Vulnerabilities for products from Weave
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Weave".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-34236 json | Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in a Gi... | 6.5 - MEDIUM | 2023-07-14 | 2023-07-31 |
| CVE-2022-35976 json | The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially cra... | 9.8 - CRITICAL | 2022-08-18 | 2022-08-23 |
| CVE-2022-35975 json | The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow fo... | 9.8 - CRITICAL | 2022-08-18 | 2022-08-22 |
| CVE-2022-31098 json | Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubern... | 7.5 - HIGH | 2022-06-27 | 2022-07-11 |
| CVE-2022-23509 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6 - MEDIUM | 2023-01-09 | 2023-11-07 |
| CVE-2022-23508 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.8 - HIGH | 2023-01-09 | 2023-11-07 |
| CVE-2020-35464 json | Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affec... | 9.8 - CRITICAL | 2020-12-15 | 2020-12-17 |
| CVE-2020-26278 json | Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and e... | 8 - HIGH | 2021-01-20 | 2021-02-02 |
| CVE-2020-11091 json | In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS request... | 5.8 - MEDIUM | 2020-06-03 | 2020-06-09 |
Known software with vulnerabilities from Weave
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Weave | Cloud Agent | 1.3.0 |
| Application | Weave | Weave | 0.10.0 |
| Application | Weave | Weave Net | 0.10.0 |