Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/10/08 2:31 p.m.•7 views

CVE-2026-93017 Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

7.7CVSS
SaveExploits0References2
Rows per page
Query Builder