tocsin

CVE-2023-32198

2 advisories.

Go/github.com/rancher/steve CVE-2023-32198: high 8, EPSS 0.33%

Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks

Action: Upgrade github.com/rancher/steve to 0.2.1 or later.

go get github.com/rancher/steve@v0.2.1
go get github.com/rancher/steve@v0.3.3
go get github.com/rancher/steve@v0.4.4
go get github.com/rancher/steve@v0.5.13

Affected

introducedfixedlast affected
0.2.00.2.1-
0.3.00.3.3-
0.4.00.4.4-
0.5.00.5.13-

Fixed versions

0.2.10.3.30.4.40.5.13

Sources

CVE-2023-32198 · published · modified · JSON

Go/github.com/rancher/steve CVE-2023-32198: unknown, EPSS 0.33%

Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks in github.com/rancher/stev

Action: Upgrade github.com/rancher/steve to 0.2.1 or later.

go get github.com/rancher/steve@v0.2.1
go get github.com/rancher/steve@v0.4.4
go get github.com/rancher/steve@v0.5.13

Affected

introducedfixedlast affected
0--
0.2.00.2.1-
0.4.00.4.4-
0.5.00.5.13-

Fixed versions

0.2.10.4.40.5.13

Sources

CVE-2023-32198 · published · modified · JSON