https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 11:11:26 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-7079 <p>A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser() middleware function. Contrary to its name, this middleware function does not verify the validity of the user&#39;s credentials. As a result, unauthenticated users can access this endpoint.</p> <p>A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser() middleware function. Contrary to its name, this middleware function does not verify the validity of the user&#39;s credentials. As a result, unauthenticated users can access this endpoint.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-7079 https://vulnerability.circl.lu/vuln/ghsa-f9cg-c8c7-cmx3 <p>A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser() middleware function. Contrary to its name, this middleware function does not verify the validity of the user&#39;s credentials. As a result, unauthenticated users can access this endpoint.</p> <p>A flaw was found in the Openshift console. The /API/helm/verify endpoint is tasked to fetch and verify the installation of a Helm chart from a URI that is remote HTTP/HTTPS or local. Access to this endpoint is gated by the authHandlerWithUser() middleware function. Contrary to its name, this middleware function does not verify the validity of the user&#39;s credentials. As a result, unauthenticated users can access this endpoint.</p> https://vulnerability.circl.lu/vuln/ghsa-f9cg-c8c7-cmx3