Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/01/05 4:1 p.m.24 views

Kruise allows leveraging the kruise-daemon pod to list all secrets in the entire cluster

Impact Attacker that has gain root privilege of the node that kruise-daemon run , can leverage the kruise-daemon pod to list all secrets in the entire cluster. After that, attackers can leverage the "captured" secrets e.g. the kruise-manager service account token to gain extra privilege such as p...

6.5CVSS7.4AI score0.00489EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder