Privilege Escalation

2021-06-1110:54:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

55.9%

JSON

servicemesh-operator is vulnerable to privilege escalation. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod.

CPENameOperatorVersion
servicemesh-operatoreq1.1.2__2.el8
servicemesh-operatoreq1.1.10__1.el8
servicemesh-operatoreq2.0.1__5.el8
servicemesh-operatoreq1.0.1__8.el8
servicemesh-operatoreq1.1.0__9.el8
servicemesh-operatoreq1.1.0__12.el8
servicemesh-operatoreq1.1.12__3.el8
servicemesh-operatoreq0.12.0__7.el8
servicemesh-operatoreq1.0.8__2.el8
servicemesh-operatoreq1.1.11__3.el8

Name	Operator	Version
servicemesh-operator	eq	1.1.2__2.el8
servicemesh-operator	eq	1.1.10__1.el8
servicemesh-operator	eq	2.0.1__5.el8
servicemesh-operator	eq	1.0.1__8.el8
servicemesh-operator	eq	1.1.0__9.el8
servicemesh-operator	eq	1.1.0__12.el8
servicemesh-operator	eq	1.1.12__3.el8
servicemesh-operator	eq	0.12.0__7.el8
servicemesh-operator	eq	1.0.8__2.el8
servicemesh-operator	eq	1.1.11__3.el8