Lucene search
+L

1 matches found

OSV
OSV
added 2024/01/05 4:1 p.m.63 views

GHSA-437M-7HJ5-9MPW Kruise allows leveraging the kruise-daemon pod to list all secrets in the entire cluster

Impact Attacker that has gain root privilege of the node that kruise-daemon run , can leverage the kruise-daemon pod to list all secrets in the entire cluster. After that, attackers can leverage the "captured" secrets e.g. the kruise-manager service account token to gain extra privilege such as p...

6.5CVSS6.6AI score0.00489EPSS
SaveExploits0References3
Rows per page
Query Builder