Vulnerabilities > CVE-2020-9298 - Server-Side Request Forgery (SSRF) vulnerability in Spinnaker Orca
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |