CVE-2021-36779: critical vulnerability in SUSE Longhorn
Host operations allowed in privileged Longhorn managed pods
Published · Updated
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.6epss 0.7%
exploitation probability
0.7%top 48% of all CVEs
observed exploitation
nono source reports it
A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
SUSE · LonghornRelated CVEs — SUSE Longhorn
In the same product, most dangerous first.