Description
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
Remediation
References
https://docs.google.com/presentation/d/1W5KU7ffh4dheR8iD54ulABImi6byAhSI-OhEKw2adRo/edit?usp=sharing
Related Vulnerabilities
CVE-2019-10382 Vulnerability in maven package org.jenkins-ci.plugins:labmanager
CVE-2022-31108 Vulnerability in npm package mermaid
CVE-2020-12265 Vulnerability in maven package org.webjars:decompress
CVE-2023-49371 Vulnerability in maven package com.ruoyi:ruoyi
CVE-2022-40309 Vulnerability in maven package org.apache.archiva:maven2-repository