Red Hat Tectonic vulnerabilities

2 CVEs affecting Red Hat Tectonic, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-9090, published 2019-09-24.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-5256, published 2018-05-18. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes cluster at /api/kubernetes/ which is accessible without authentication to…
• CVE-2018-9090, published 2019-09-24. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. CoreOS Tectonic 1.7.x and 1.8.x before 1.8.7-tectonic.2 deploys the Grafana web application using default credentials (admin/admin) for the administrator account located at grafana-credentials…