Lucene search

CVE-2024-36539

🗓️ 24 Jul 2024 17:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 36 Views🌐 WEB

Insecure permissions in contour v1.28.3, allowing data access and privilege escalatio

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
GithubExploit	Exploit for CVE-2024-36539	3 Aug 202406:37	–	githubexploit
Cvelist	CVE-2024-36539	24 Jul 202400:00	–	cvelist
NVD	CVE-2024-36539	24 Jul 202417:15	–	nvd
Vulnrichment	CVE-2024-36539	24 Jul 202400:00	–	vulnrichment

Source	Link
gist	www.gist.github.com/HouqiyuA/c92f9ec979653dceeea947afd0b47a80

Parameter	Position	Path	Description	CWE
namespace	path	/api/v1/namespaces/{namespace}/pods	Insecure permissions in Contour v1.28.3 allow attackers to access service account tokens and escalate privileges by making unauthorized requests to the Kubernetes API.	CWE-277

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jul 2024 17:15Current

7.1High risk

Vulners AI Score7.1

CVSS39.8

EPSS0.07013

SSVC

CWE-277