Lucene search

K
osvGoogleOSV:GO-2022-1181
HistoryAug 21, 2024 - 4:03 p.m.

AAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identity

2024-08-2116:03:59
Google
osv.dev
3
azure
identity
token
github
issue

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L

AI Score

6.7

Confidence

Low

AAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identity

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L

AI Score

6.7

Confidence

Low