Red Hat Noobaa-Operator vulnerabilities

2 CVEs affecting Red Hat Noobaa-Operator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3529, published 2021-06-02.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3528, published 2021-05-13. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the…
• CVE-2021-3529, published 2021-06-02. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a…