Weakness (CWE)
CWE-1100: Insufficient Isolation of System-Dependent Functions
The product or code does not isolate system-dependent
functionality into separate standalone modules.
Source: MITRE CWE-1100
2 results · Clear filters · Feed
-
Medium 6.5
Unauthorized Access in danswer-ai/danswer
In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-en…
-
Medium 6.5
Improper network isolation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.