Wweaveworks

Products

Exploited and recent CVEs

• CVE-2023-34236 High 8.5 Information Disclosure Vulnerability in Weave GitOps Terraform Controller 1.0%
• CVE-2022-23509 High 7.4 Weave Gitops Run vulnerable to insecure communication 0.2%
• CVE-2022-23508 High 8.9 GitOps Run allows for Kubernetes workload injection 0.3%
• CVE-2022-35976 Medium 5.2 Improper KubeConfig handling allows arbitrary code execution 0.5%
• CVE-2022-35975 Critical 9.0 Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode 1.4%
• CVE-2022-31098 Critical 9.0 Weave GitOps leaked cluster credentials into logs on connection errors 1.3%
• CVE-2020-26278 Medium 5.8 Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities 0.7%
• CVE-2020-11091 Medium 5.8 Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements 0.9%