CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

CVE-2024-36541 concerns the Kubernetes logging-operator (v4.6.0) with insecure permissions that allow an attacker to access the service account token. This enables potential data access and privilege escalation within the cluster. Affected component: logging-operator, version 4.6.0. Root cause: i...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541: Incorrect Default Permissions

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, dex-fips, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, minio-fips, prometheus-operator, cri-tools, prometheus-beat-exporter, kubevela, kube-oidc-proxy, pulumi-kubernetes-operator, pulumi-language-yaml,...