CVE Intelligence

Go Github.com/submariner-io/submariner-operator vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Go Github.com/submariner-io/submariner-operator: 1 record(s), with affected versions and fixes.

CVE-2024-5042 Medium · 6.6 CWE-250 May 17, 2024
Submariner-operator: rbac permissions can allow for the spread of node compromises
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.