Advisories · Technology
edgelesssys contrast.
Every CVE that names edgelesssys contrast among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection
- edgelesssys contrast
- CWE-1289
- CVSS 8.7 High
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
- edgelesssys contrast
- CWE-345
- CVSS 8.5 High
Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation
- edgelesssys contrast
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Contrast before 1.16.0 Remote Attestation Relay Attack
- edgelesssys contrast
- Weak cryptography or TLS
- CVSS 8.6 High
Contrast before 1.23.1 Image Substitution via Policy Generation
- edgelesssys contrast
- CWE-20