CVE-2022-39273

creationtimestamp| type| source ---|---|--- 2022-10-06 22:17:01+00:00| seen| https://t.me/cibsecurity/50909...

CVE-2022-39273

FlyteAdmin's CVE-2022-39273 describes a vulnerability in the default OAuth2 authorization server configuration. When ExternalAuthorizationServer is not specified, the default clientid hashes and a hardcoded hashed password in Flyte Admin (and propagated to the Propeller configmap in Helm charts) ...