https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:30:35 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-5651 <p>A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator&#39;s pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.</p> <p>A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator&#39;s pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-5651 https://vulnerability.circl.lu/vuln/ghsa-76qm-c9j2-wm6v <p>A flaw was found in fence agents that rely on SSH/Telnet. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator&#39;s pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.</p> <p>A flaw was found in fence agents that rely on SSH/Telnet. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator&#39;s pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.</p> https://vulnerability.circl.lu/vuln/ghsa-76qm-c9j2-wm6v https://vulnerability.circl.lu/vuln/rhsa-2024:5453 <p>fence-agents-remediation: Fence Agent Command Line Options Leads to Remote Code Execution</p> <p>fence-agents-remediation: Fence Agent Command Line Options Leads to Remote Code Execution</p> https://vulnerability.circl.lu/vuln/rhsa-2024:5453 https://vulnerability.circl.lu/vuln/ubuntu-cve-2024-5651 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: fence-agents, Ubuntu:Pro:18.04:LTS: fence-agents, Ubuntu:20.04:LTS: fence-agents, Ubuntu:22.04:LTS: fence-agents, Ubuntu:24.04:LTS: fence-agents</p> <p>A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator&#39;s pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: fence-agents, Ubuntu:Pro:18.04:LTS: fence-agents, Ubuntu:20.04:LTS: fence-agents, Ubuntu:22.04:LTS: fence-agents, Ubuntu:24.04:LTS: fence-agents</p> <p>A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting  --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator&#39;s pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2024-5651 https://vulnerability.circl.lu/vuln/wid-sec-w-2024-1866 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2024-1866