CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

creationtimestamp| type| source ---|---|--- 2024-07-24 19:09:33+00:00| seen| https://t.me/cvedetector/1575...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

CVE-2024-36541 concerns the Kubernetes logging-operator (v4.6.0) with insecure permissions that allow an attacker to access the service account token. This enables potential data access and privilege escalation within the cluster. Affected component: logging-operator, version 4.6.0. Root cause: i...