Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:turbonomic_prometurbo_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTurbonomic Prometurbo Agent (55068df3-43fc-5351-af72-a2ebf49944e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/ibm/turbonomic-container-platform purl2cpe 2026-07-28 16:41:06.918454

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6389 vulnerable 2026-06-08 08:07:04.735324 IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability
HIGH (8.8)
IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, and potentially achieve full cluster compromise.
Published: 2026-04-30T21:17:06.371Z
Updated: 2026-05-01T16:37:57.048Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.