CVE-2023-30617 Leverage the kruise-daemon pod to list all secrets in the entire cluster

Kruise provides automated management of large-scale applications on Kubernetes. Starting in version 0.8.0 and prior to versions 1.3.1, 1.4.1, and 1.5.2, an attacker who has gained root privilege of the node that kruise-daemon run can leverage the kruise-daemon pod to list all secrets in the entir...

PT-2024-3983

Name of the Vulnerable Software and Affected Versions Kruise versions 0.8.0 through 1.3.0 Kruise versions 1.4.0 through 1.4.0 Kruise versions 1.5.0 through 1.5.1 Description Kruise provides automated management of large-scale applications on Kubernetes. An attacker who has gained root privilege o...

CVE-2023-30617: Execution with Unnecessary Privileges

Kruise provides automated management of large-scale applications on Kubernetes. Starting in version 0.8.0 and prior to versions 1.3.1, 1.4.1, and 1.5.2, an attacker who has gained root privilege of the node that kruise-daemon run can leverage the kruise-daemon pod to list all secrets in the entir...