Skip to content
OpenAdvisories

Vendor

vanus-labs

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

    Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to ma…