CVE-2024-25620 affecting package cert-manager for versions less than 1.12.12-2

CVE-2024-25620 affecting package cert-manager for versions less than 1.12.12-2. A patched version of the package is available...

CVE-2023-45142 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-45142 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-28180 affecting package cert-manager for versions less than 1.12.12-1

CVE-2024-28180 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package cert-manager for versions less than 1.12.12-1

CVE-2024-24786 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-2253 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-2253 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-48795 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-48795 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3978 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-3978 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2024-25620)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25620 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources...

CVE-2024-6104 affecting package cert-manager for versions less than 1.11.2-12

CVE-2024-6104 affecting package cert-manager for versions less than 1.11.2-12. A patched version of the package is available...

CVE-2024-25620 affecting package cert-manager for versions less than 1.11.2-12

CVE-2024-25620 affecting package cert-manager for versions less than 1.11.2-12. A patched version of the package is available...

Incorrect Access Control

github.com/cert-manager/cert-manager is vulnerable to Incorrect Access Control. The vulnerability is due to insecure permissions in cert-manager, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

cert-manager 安全漏洞

cert-manager is a certificate manager in the cert-manager open source. Adds certificates and certificate issuers as resource types in a Kubernetes cluster and simplifies the process of obtaining, renewing, and using these certificates. A security vulnerability exists in cert-manager v1.14.4 and...

PT-2024-27057 · Unknown · Cert-Manager

Name of the Vulnerable Software and Affected Versions: cert-manager version 1.14.4 Description: The issue is related to insecure permissions, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. Recommendations: For cert-manager version...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36537

CVE-2024-36537 : cert-manager v1.14.4 contains an insecure permissions flaw that allows an attacker to access the service account token and escalate privileges, per NVD/Red Hat/IBM notes. Root cause is improper access control on credentials, enabling exposure of sensitive data. The connected advi...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CBL Mariner 2.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...