AZL-25938 CVE-2022-3162 affecting package prometheus-adapter for versions less than 0.10.0-17
Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...