CVE-2024-43403

Kanister (github.com/kanisterio/kanister) is affected by CVE-2024-43403 due to a deployment named default-kanister-operator bound to the Kubernetes ClusterRole edit. The edit ClusterRole includes permissive permissions (create/patch/update for daemonsets, create for serviceaccount/tokens, and imp...

CVE-2024-43403 Kanister has a potential risk which can be leveraged to make a cluster-level privilege escalation

Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate...

CVE-2024-43403 Kanister has a potential risk which can be leveraged to make a cluster-level privilege escalation

Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate...

CVE-2024-42363

Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the Kubernetes::Util.parsefile method where it is unsafely deserialized using the YAML.loadstream...

GO-2023-1985 Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes...

GO-2023-1977 Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes

Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes...

GO-2023-1959 Kubernetes arbitrary file overwrite in k8s.io/kubernetes

Kubernetes arbitrary file overwrite in k8s.io/kubernetes...

GO-2023-1946 Kubernetes DoS Vulnerability in k8s.io/kubernetes

Kubernetes DoS Vulnerability in k8s.io/kubernetes...

GO-2023-1864 Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes...

GO-2023-1892 Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

Kubernetes mountable secrets policy bypass in k8s.io/kubernetes...

GO-2023-1891 Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes

Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes...

GO-2023-1629 Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

Kubernetes vulnerable to validation bypass in k8s.io/kubernetes...

GO-2023-1628 Kubernetes vulnerable to path traversal in k8s.io/kubernetes

Kubernetes vulnerable to path traversal in k8s.io/kubernetes...

GO-2023-1377 GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops...

GO-2023-1492 Kubernetes Privilege Escalation in k8s.io/kubernetes

Kubernetes Privilege Escalation in k8s.io/kubernetes...

CVE-2024-42363 GHSL-2023-136_Samson

Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the Kubernetes::Util.parsefile method where it is unsafely deserialized using the YAML.loadstream...

CVE-2024-42363 GHSL-2023-136_Samson

Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the Kubernetes::Util.parsefile method where it is unsafely deserialized using the YAML.loadstream...

CVE-2024-42363 GHSL-2023-136_Samson

Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the Kubernetes::Util.parsefile method where it is unsafely deserialized using the YAML.loadstream...

CVE-2024-42363

CVE-2024-42363 affects Samson (Zendesk open source web interface for deployment) prior to v3385. The issue stems from the user-controlled parameter “role” entering the Kubernetes::RoleVerificationsController, flowing into RoleConfigFile, then Kubernetes::Util.parse_file where YAML.load_stream des...

Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...