Cubefs vulnerabilities
We track 2 vulnerabilities in Cubefs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 3, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Cubefs vulnerabilities
- 9.8 Critical severity
cubefs: Exposure of Sensitive Information to an Unauthorized Actor
CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in pla
- 9.8 Critical severity
cubefs: Use of Insufficiently Random Values
CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to pred