redpanda records

3 published records for vendor redpanda.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-50976No exploit	Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.redpanda · redpanda · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	1.0%	Dec 17, 2023
22Monitor	CVE-2023-24619No exploit	Redpanda before 22.3.12 discloses cleartext AWS credentials.redpanda · redpanda · CWE-522 Info leak	Medium5.5	—	0.3%	Feb 13, 2023
17Monitor	CVE-2023-30450No exploit	rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data typredpanda · redpanda · CWE-20	Medium4.3	—	0.6%	Apr 8, 2023

CVE-2023-50976
39Monitor
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
redpanda · redpandaDec 17, 2023
CVE-2023-24619
22Monitor
Redpanda before 22.3.12 discloses cleartext AWS credentials.
MediumCVSS 5.5No exploitEPSS 0%
- Info leak
redpanda · redpandaFeb 13, 2023
CVE-2023-30450
17Monitor
rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data typ
MediumCVSS 4.3No exploitEPSS 1%
redpanda · redpandaApr 8, 2023