PolicyController prior to 0.2.1 allows false positive admission in Kubernetes clusters
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
OSV | CGA-5g6r-gqx2-76cw | 6 Jun 202412:24 | – | osv |
OSV | PolicyController before 0.2.1 may bypass attestation verification | 10 Aug 202218:38 | – | osv |
OSV | CVE-2022-35930 | 4 Aug 202222:15 | – | osv |
OSV | PolicyController before 0.2.1 may bypass attestation verification in github.com/sigstore/policy-controller | 21 Aug 202415:21 | – | osv |
Cvelist | CVE-2022-35930 Ability to bypass attestation verification in sigstore PolicyController | 4 Aug 202221:15 | – | cvelist |
NVD | CVE-2022-35930 | 4 Aug 202222:15 | – | nvd |
Prion | Design/Logic Flaw | 4 Aug 202222:15 | – | prion |
Veracode | Supply Chain Attack | 5 Aug 202219:34 | – | veracode |
Github Security Blog | PolicyController before 0.2.1 may bypass attestation verification | 10 Aug 202218:38 | – | github |
[
{
"product": "policy-controller",
"vendor": "sigstore",
"versions": [
{
"status": "affected",
"version": "< 0.2.1"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo