CVE-2021-3495

The CVE-2021-3495 vulnerability is an improper access-control flaw in kiali-operator before version 1.33.0 (and before 1.24.7 for the alternate stream). An attacker with basic cluster access could deploy a specified image to any namespace, potentially accessing privileged service account tokens a...