Vulnerabilidades do Go Github.com/submariner-io/submariner-operator
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Go Github.com/submariner-io/submariner-operator: 1 registro(s), com versões afetadas e correções.
CVE-2024-5042
Média · 6.6
CWE-250 17/05/2024
Submariner-operator: rbac permissions can allow for the spread of node compromises
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.