Lucene search
Veracode Vulnerability DatabaseVERACODE:32975HistoryNov 15, 2021 - 7:29 a.m.
Privilege Escalation
2021-11-1507:29:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
vulnerability
privilege escalation
kubernetes
shell commands
container os
embedding shell script
flux kustomization objects.
EPSS
0.003
Percentile
70.3%
github.com/fluxcd/kustomize-controller is vulnerable to privilege escalation. Users with privilege to create Kubernetes Secrets, Service Accounts and Flux Kustomization objects is allowed to use kustomize-controller to execute shell commands on the container OS via embedding a shell script in a Kubernetes Secret.
Related
cvelist
cvelist
osv
osv
CGA-x2wv-c49v-7fp2
2024-06-06 12:26:32
Privilege escalation to cluster admin on multi-tenant environments
2021-11-15 17:35:33
github
github
Privilege escalation to cluster admin on multi-tenant environments
2021-11-15 17:35:33
nvd
nvd
CVE-2021-41254
2021-11-12 18:15:07
prion
prion
Design/Logic Flaw
2021-11-12 18:15:00
cve
cve
CVE-2021-41254
2021-11-12 18:15:07