Go Github.com/submariner-io/submariner-operator vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Go Github.com/submariner-io/submariner-operator: 1 record(s), with affected versions and fixes.
CVE-2024-5042
Medium · 6.6
CWE-250 May 17, 2024
Submariner-operator: rbac permissions can allow for the spread of node compromises
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.