Executive brief
MarbleRun unauthenticated recovery allows Coordinator impersonation
Affected products
- Go github.com/edgelesssys/marblerun
Junglewise Threat Intelligence
MarbleRun unauthenticated recovery allows Coordinator impersonation
Severity: low · CVSS 3.1 · Published 2025-02-04
Technologies: github.com/edgelesssys/marblerun (Go). Vendors: Go.
Related threats
- GO-2025-3450 - MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun
- GO-2023-2378 - Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks
- GO-2024-2583 - Encryption bypass in github.com/edgelesssys/marblerun
- Transparent TLS may not be applied to Marbles with certain manifest configurations
- Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks