Logging operator 安全漏洞

Logging operator is a Kubernetes logging manager in the Kube Logging open source. A security vulnerability exists in Logging operator version 4.6.0 and earlier, which stems from an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate privileges by obtainin...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

PT-2024-27062 · Unknown · Logging-Operator

Name of the Vulnerable Software and Affected Versions: logging-operator version 4.6.0 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For logging-operator version 4.6.0,...

CVE-2024-36541

CVE-2024-36541 concerns the Kubernetes logging-operator (v4.6.0) with insecure permissions that allow an attacker to access the service account token. This enables potential data access and privilege escalation within the cluster. Affected component: logging-operator, version 4.6.0. Root cause: i...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: buf, pulumi-language-yaml, gitness, prometheus-redis-exporter, policy-controller-fips, conftest, external-secrets-fips, smarter-device-manager, metallb, azure-aad-pod-identity-mic, kiam, chartmuseum, helm, kubernetes-csi-livenessprobe-fips, temporal-ui-server-fips,...