CyberSecBulletin

Arvados vulnerabilities

We track 2 vulnerabilities in Arvados products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2022.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Arvados vulnerabilities

  • 8.8 High severity

    arvados: Improper Authentication

    CVE-2022-39238Arvados

    Arvados is an open source platform for managing and analyzing biomedical big data. In versions prior to 2.4.3, when using Portable Authentication Modules (PAM) for user authentication, if a user presented valid credentials but the account is disabled or otherw

  • 8.8 High severity

    arvados: Deserialization of Untrusted Data

    CVE-2022-36006ArvadosEPSS 1.73%

    Arvados is an open source platform for managing, processing, and sharing genomic and other large scientific and biomedical data. A remote code execution (RCE) vulnerability in the Arvados Workbench allows authenticated attackers to execute arbitrary code via s