← Back

CVE-2021-36779

nvd nist
Published: Dec 17, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.6
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 6.0
Source: NVD

Description

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3.

Affected (2)

Linuxfoundation
1 product
Longhorn
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Linuxfoundation
Longhorn
Before 1.1.3
Longhorn
From 1.2.0 to 1.2.3

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

Source: meissner@suse.de
Issue TrackingVendor Advisory
Source: meissner@suse.de
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.