Lucene search

GoogleOSV:GO-2024-2866

HistoryJun 05, 2024 - 3:10 p.m.

Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator

2024-06-0515:10:42

Google

osv.dev

submariner operator

rbac permissions

helm charts

github

software

6.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

0.0004 Low

EPSS

Percentile

15.6%

JSON

Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator

CPENameOperatorVersion
github.com/submariner-io/submariner-operatorlt0.16.4
github.com/submariner-io/submariner-operatorge0.17.0

CPE	Name	Operator	Version
	github.com/submariner-io/submariner-operator	lt	0.16.4
	github.com/submariner-io/submariner-operator	ge	0.17.0

References

access.redhat.com/security/cve/CVE-2024-5042

bugzilla.redhat.com/show_bug.cgi?id=2280921

github.com/advisories/GHSA-2rhx-qhxp-5jpw

github.com/submariner-io/submariner-operator/commit/b27a04c4270e53cbff6ff8ac6245db10c204bcab

github.com/submariner-io/submariner-operator/issues/3041

github.com/submariner-io/submariner-operator/pull/3040

nvd.nist.gov/vuln/detail/CVE-2024-5042

6.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

0.0004 Low

EPSS

Percentile

15.6%

JSON

Related for OSV:GO-2024-2866