22092 matches found
CVE-2024-36536: Incorrect Authorization
Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36540
The external-secrets Kubernetes-related application version 0.9.16 and earlier is vulnerable to a security flaw caused by insecure permissions . This vulnerability allows an attacker to access sensitive data and perform privilege escalation by obtaining a token for a service account. To remediate...
Meshery 安全漏洞
Meshery is a multi-service grid management plane open-sourced by Meshery. A security vulnerability exists in meshery v0.7.51 and earlier versions that stems from the presence of insecure privileges allowing an attacker to access sensitive data and elevate privileges by obtaining a token for a...
CVE-2024-36537
The cert-manager component (specifically version v1.14.4 ) is vulnerable to an improper access control flaw (CWE-284) due to insecure permissions. This vulnerability allows a remote authenticated attacker to obtain a service account's token , which can be leveraged to access sensitive data and es...
CVE-2024-36538
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36534: Incorrect Privilege Assignment
Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36533
The batch processing system Volcano (specifically v1.8.2 and earlier) is vulnerable to insecure permissions at the volcano.sh/volcano endpoint. This flaw allows an attacker to access sensitive data and perform privilege escalation by obtaining a service account's token. As a remediation, users ar...
The vulnerabilities of the event monitoring, threat detection, security analytics platforms of IBM QRadar Suite, as well as the IBM Cloud Pak for Security security platform, allow attackers to gain access to confidential information.
The vulnerabilities of event monitoring platforms, threat detection systems, security analytics in the IBM QRadar Suite, and IBM Cloud Pak for Security related to security configuration errors can be exploited by attackers operating remotely. This allows them to gain access to confidential...
CVE-2024-36538: Insecure Preserved Inherited Permissions
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36539: Insecure Inherited Permissions
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36536
The container networking solution fabedge version v0.8.1 and earlier is vulnerable to Improper Access Control due to insecure permissions. This flaw allows an attacker to obtain a service account's token , which can be used to access sensitive data and escalate privileges within the system. To mi...
PT-2024-27055 · Meshery · Meshery
Name of the Vulnerable Software and Affected Versions: meshery version 0.7.51 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For meshery version 0.7.51, update to a...
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36541: Incorrect Default Permissions
Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36537
Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36536
Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36539
In Contour v1.28.3 , a vulnerability exists where insecure permissions allow an attacker to obtain a service account's token . Exploitation of this flaw enables unauthorized access to sensitive data and provides a pathway for privilege escalation within the Kubernetes cluster. To mitigate this ri...
PT-2024-27059 · Contour · Contour
Name of the Vulnerable Software and Affected Versions: contour version 1.28.3 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For contour version 1.28.3, update the...
