Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1100: Insufficient Isolation of System-Dependent Functions

Base Incomplete

The product or code does not isolate system-dependent
functionality into separate standalone modules.

Source: MITRE CWE-1100

2 results · Clear filters · Feed

  • Medium 6.5

    Unauthorized Access in danswer-ai/danswer

    In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-en…

  • Medium 6.5

    Improper network isolation in Hashicorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.