Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46774
HistoryMay 07, 2024 - 6:45 a.m.

Improper Access Control

2024-05-0706:45:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
github.com/piraeusdatastore/piraeus-operator
vulnerability
improper access control
listing
cluster secrets
attacker
service account

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.8%

github.com/piraeusdatastore/piraeus-operator is vulnerable to Improper access control. The vulnerability is due to the ClusterRole being granted excessive permissions, specifically the ability to list all secrets in the cluster, which allows an attacker to impersonate the service account bound to this ClusterRole and list confidential information across the cluster.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.8%

Related for VERACODE:46774