External Secrets Operator vulnerable to privilege escalation

Details The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets...

CVE-2024-45041

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...

PT-2024-31392

Name of the Vulnerable Software and Affected Versions External Secrets Operator versions prior to 0.10.2 Description The External Secrets Operator is a Kubernetes operator that integrates external secret management systems. It has a deployment called default-external-secrets-cert-controller, whic...

CVE-2024-45041: Improper Privilege Management

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...