Privilege escalation

Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in clusternet prior to version 0.15.2 can be leveraged to lead to a cluster-level privilege escalation. The clusternet has a deployment called cluster-hub inside the clusternet-syste...

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

A large-scale attack campaign discovered in the wild has been exploiting Kubernetes K8s Role-Based Access Control RBAC to create backdoors and run cryptocurrency miners. "The attackers also deployed DaemonSets to take over and hijack resources of the K8s clusters they attack," cloud security firm...

Rancher Labs Rancher 安全漏洞

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. in the United States. A security vulnerability exists in Rancher for SUSE prior to version 2.6.7 and Rancher Labs Rancher prior to version 2.5.16, which stems from an improper authorization...

PT-2022-10661

Name of the Vulnerable Software and Affected Versions Red Hat AMQ Broker version 7.8 Description A flaw in the management console allows an existing user to access limited information, despite their role not being allowed access. This affects confidentiality due to incorrect role binding checks,...