Vulnerabilities > Pagerduty
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-16 | CVE-2023-47112 | Missing Authorization vulnerability in Pagerduty Rundeck 4.17.0/4.17.1/4.17.2 Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 4.3 |
| 2023-11-16 | CVE-2023-48222 | Missing Authorization vulnerability in Pagerduty Rundeck Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 5.4 |
| 2022-06-15 | CVE-2022-31044 | Insufficiently Protected Credentials vulnerability in Pagerduty Rundeck 4.2.0/4.2.1 Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 5.0 |
| 2022-05-20 | CVE-2022-29186 | Use of Hard-coded Credentials vulnerability in Pagerduty Rundeck Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 9.8 |
| 2022-02-28 | CVE-2021-41111 | Authorization Bypass Through User-Controlled Key vulnerability in Pagerduty Rundeck Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 5.5 |
| 2022-02-28 | CVE-2021-41112 | Missing Authorization vulnerability in Pagerduty Rundeck Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 5.5 |
| 2021-08-30 | CVE-2021-39132 | Deserialization of Untrusted Data vulnerability in Pagerduty Rundeck Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 6.5 |
| 2021-08-30 | CVE-2021-39133 | Cross-Site Request Forgery (CSRF) vulnerability in Pagerduty Rundeck Rundeck is an open source automation service with a web console, command line tools and a WebAPI. | 6.0 |
| 2020-04-29 | CVE-2020-11009 | Authorization Bypass Through User-Controlled Key vulnerability in Pagerduty Rundeck In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to see. | 4.0 |
| 2019-08-05 | CVE-2019-3800 | Information Exposure vulnerability in multiple products CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. | 2.1 |