Vendor
vanus-labs
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway
Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to ma…