Github.Com Weaveworks Weave vulnerabilities

1 known vulnerability affecting github.com/weaveworks_weave.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-11091HIGHCVSS 8.1≥ 0, < 2.6.32021-05-27

CVE-2020-11091 [HIGH] CWE-350 Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements ### Impact An attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host (via ipv6.disable=1 on the kernel cmdline), it