EUVD-2020-18319

Malware in sbrugna...

CVE-2020-25655

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permissio...

Code injection

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permissio...

CVE-2020-25655

The CVE-2020-25655 issue affects the ManagedClusterView API, enabling a temporary exposure window where admin-created views can be read by users with view permissions, risking disclosure of cluster secrets. Public sources in the connected documents describe an RBAC bypass that could disclose secr...

CVE-2020-25655

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permissio...

PT-2020-16150

Name of the Vulnerable Software and Affected Versions ManagedClusterView API affected versions not specified Description An issue in the ManagedClusterView API could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for...

CVE-2020-25655: Incorrect Authorization

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permissio...

CVE-2020-25655

A flaw was found in the ManagedClusterView API, allowed secrets to be disclosed to users without the correct permissions. Views created for an admin user are made available for a short time to users with view-only permission. In this short time window, the user with view-only permission can read...