Approved changes feed: RSS · Atom
cpe:2.3:a:suse:longhorn:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Longhorn (b9bcc4ee-fe11-5298-9c04-0e5559472db7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36780 |
vulnerable | 2026-06-08 05:32:52.517590 |
Unauthorized data access from replicas through vulnerable instance manager pods
HIGH (8.1)
A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3v.
Published: 2021-12-17T08:55:14.523Z
Updated: 2024-09-16T23:15:43.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36779 |
vulnerable | 2026-06-08 05:32:52.516467 |
Host operations allowed in privileged Longhorn managed pods
CRITICAL (9.6)
A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3.
Published: 2021-12-17T08:55:13.033Z
Updated: 2024-09-16T23:20:38.350Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.