CVE-2024-36541: Incorrect Default Permissions

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

CVE-2024-36541 concerns the Kubernetes logging-operator (v4.6.0) with insecure permissions that allow an attacker to access the service account token. This enables potential data access and privilege escalation within the cluster. Affected component: logging-operator, version 4.6.0. Root cause: i...

PT-2024-27062 · Unknown · Logging-Operator

Name of the Vulnerable Software and Affected Versions: logging-operator version 4.6.0 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For logging-operator version 4.6.0,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, kaf, kuberay-operator, kyverno-policy-reporter-ui, pulumi, pulumi-language-yaml, cosign-fips, kubevela, crossplane-provider-aws-iam, metrics-server, prometheus-postgres-exporter, external-secrets-fips, envoy-ratelimit, mc,...