ME
Product
Mesos
9
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add Mesos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000421 | 6.5 | Jan 9 | An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test… Affected: through 0.17.1 |
| CVE-2018-1000420 | 6.5 | Jan 9 | An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials… Affected: through 0.17.1 |
| CVE-2018-8023 | 5.9 | Sep 21 | Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT) Affected: before 1.4.2; 1.5.0; 1.5.1; 1.6.0 |
Showing 3
