cert-manager 安全漏洞

cert-manager is a certificate manager in the cert-manager open source. Adds certificates and certificate issuers as resource types in a Kubernetes cluster and simplifies the process of obtaining, renewing, and using these certificates. A security vulnerability exists in cert-manager v1.14.4 and...

CVE-2024-36534

Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36536

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36535

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36538

Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

PT-2024-27056 · Fabedge · Fabedge

Name of the Vulnerable Software and Affected Versions: fabedge version 0.8.1 Description: The issue concerns insecure permissions in fabedge, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. Recommendations: For fabedge version 0.8.1,...

CVE-2024-36540

Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Meshery 安全漏洞

Meshery is a multi-service grid management plane open-sourced by Meshery. A security vulnerability exists in meshery v0.7.51 and earlier versions that stems from the presence of insecure privileges allowing an attacker to access sensitive data and elevate privileges by obtaining a token for a...

CVE-2024-36538

Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36538

Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

PT-2024-27061 · Unknown · External-Secrets

Name of the Vulnerable Software and Affected Versions: external-secrets version 0.9.16 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For external-secrets version 0.9.1...

CVE-2024-36540

The CVE refers to CVE-2024-36540 affecting external-secrets v0.9.16, where insecure permissions in the service account token handling allow an attacker to access sensitive data and escalate privileges. The issue is described across multiple feeds as a root-cause of insecure permissions enabling t...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Chaos Mesh 安全漏洞

Chaos Mesh is an open source cloud-native engineering platform from Chaos Mesh Open Source. A security vulnerability exists in Chaos Mesh 2.6.3 and earlier versions, which stems from the presence of an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate...

HwameiStor 安全漏洞

HwameiStor is a Kubernetes-native Container Attached Storage CAS solution open-sourced by HwameiStor. A security vulnerability exists in HwameiStor v0.14.3 and earlier versions, which stems from the presence of an insecure privilege that allows an attacker to access sensitive data and elevate...

PT-2024-27053 · Volano · Volcano

Name of the Vulnerable Software and Affected Versions: volcano version 1.8.2 Description: The issue is related to insecure permissions, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. This can be achieved through the volcano.sh/volcano...

Logging operator 安全漏洞

Logging operator is a Kubernetes logging manager in the Kube Logging open source. A security vulnerability exists in Logging operator version 4.6.0 and earlier, which stems from an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate privileges by obtainin...

CVE-2024-36539

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36539

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36536

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...