Lucene search
+L

2 matches found

OSV
OSV
•added 2026/06/18 1:04 p.m.•18 views

GHSA-R427-J2H7-WV3M Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

Impact When only the Topic or only the User operators are deployed as part of the Entity Operator in the Kafka custom resource, the RBAC rights are not following the principle of least-privilege and the Entity Operator ServiceAccount still has access rights corresponding to both operators. That...

5.4CVSS5.3AI score0.0025EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/18 1:04 p.m.•20 views

Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

Impact When only the Topic or only the User operators are deployed as part of the Entity Operator in the Kafka custom resource, the RBAC rights are not following the principle of least-privilege and the Entity Operator ServiceAccount still has access rights corresponding to both operators. That...

5.4CVSS5.4AI score0.0025EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder