Lucene search
PhotonPHSA-2023-4.0-0373HistoryApr 10, 2023 - 12:00 a.m.
Important Photon OS Security Update - PHSA-2023-4.0-0373
2023-04-1000:00:00
github.com
10
photon os
security update
haproxy
consul
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
89.0%
Updates of [‘consul’, ‘haproxy’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 4.0 | x86_64 | haproxy-doc | < 2.6.0-3.ph4 | haproxy-doc-2.6.0-3.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | consul | < 1.11.9-1.ph4 | consul-1.11.9-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | haproxy | < 2.6.0-3.ph4 | haproxy-2.6.0-3.ph4.x86_64.rpm |
Related
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0587
2023-05-26 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0566
2023-04-10 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0143
2023-11-15 00:00:00
osv
osv
BIT-consul-2021-41803
2024-03-06 10:52:42
cgr
cgr
CVE-2021-41803 vulnerabilities
2024-05-19 03:07:16
CVE-2022-29153 vulnerabilities
2024-05-19 03:07:16
CVE-2022-40716 vulnerabilities
2024-05-19 03:07:16
nvd
nvd
cvelist
cvelist
debiancve
debiancve
ubuntucve
ubuntucve
redhatcve
redhatcve
prion
prion
Design/Logic Flaw
2022-09-23 01:15:00
Design/Logic Flaw
2022-09-23 12:15:00
Server side request forgery (ssrf)
2022-04-19 16:17:00
veracode
veracode
Denial Of Service (DOS)
2022-09-28 19:58:46
Server-Side Request Forgery (SSRF)
2023-08-06 05:31:04
Authentication Bypass
2022-09-27 13:08:32
alpinelinux
alpinelinux
nuclei
nuclei
HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery
2023-01-08 15:26:05
cve
cve
github
github
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector
2022-04-20 00:00:33
HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions
2022-09-25 00:00:15
HashiCorp Consul vulnerable to authorization bypass
2022-09-25 00:00:27
wolfi
wolfi
CVE-2022-40716 vulnerabilities
2024-07-03 09:08:38
CVE-2021-41803 vulnerabilities
2024-07-03 09:08:38
CVE-2022-29153 vulnerabilities
2024-07-03 09:08:38
nessus
nessus
RHEL 7 : haproxy (Unpatched Vulnerability)
2024-05-11 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : haproxy (SUSE-SU-2023:0153-1)
2023-01-26 00:00:00
RHEL 9 : haproxy (RHSA-2023:6496)
2023-11-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: moby-engine-20.10.22-1.fc37
2023-01-11 01:22:35
[SECURITY] Fedora 36 Update: moby-engine-20.10.21-1.fc36
2022-12-29 01:16:02
[SECURITY] Fedora 36 Update: golang-github-containerd-cgroups-1.0.4-3.fc36
2022-12-29 01:16:02
openvas
openvas
Fedora: Security Advisory for containerd (FEDORA-2022-7e327a20be)
2022-12-26 00:00:00
Fedora: Security Advisory for moby-engine (FEDORA-2022-db674bafd9)
2022-12-30 00:00:00
Fedora: Security Advisory for moby-engine (FEDORA-2023-fde38dda12)
2023-01-11 00:00:00
ubuntu
ubuntu
HAProxy vulnerability
2023-01-23 00:00:00
HAProxy vulnerability
2023-04-03 00:00:00
debian
debian
[SECURITY] [DSA 5388-1] haproxy security update
2023-04-13 20:16:59
[SECURITY] [DSA 5348-1] haproxy security update
2023-02-14 16:20:20
redhat
redhat
(RHSA-2023:6496) Moderate: haproxy security and bug fix update
2023-11-07 06:07:03
(RHSA-2023:1978) Moderate: haproxy security update
2023-04-25 09:58:09
(RHSA-2023:1696) Moderate: haproxy security update
2023-04-11 13:44:23
almalinux
almalinux
Moderate: haproxy security and bug fix update
2023-11-07 00:00:00
Moderate: haproxy security update
2023-04-11 00:00:00
oraclelinux
oraclelinux
haproxy security and bug fix update
2023-11-11 00:00:00
haproxy security update
2023-04-11 00:00:00
mageia
mageia
Updated docker packages fix security vulnerability
2023-01-24 10:58:24
vmware
vmware
packetstorm
packetstorm
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
zdt
zdt
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
89.0%
Related for PHSA-2023-4.0-0373