~/products/github.com/kubean-io_kubean

pipeline liveDigest Docs

Github.Com Kubean-Io Kubean vulnerabilities

1 known vulnerability affecting github.com/kubean-io_kubean.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2024-41820P4HIGH≥ 0, < 0.18.02024-08-05

CVE-2024-41820 [HIGH] CWE-276 Kubean vulnerable to cluster-level privilege escalation Kubean vulnerable to cluster-level privilege escalation ### Impact This ClusterRole has `*` verbs of `*` resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster, resulting in a cluster-level privilege escalation. ### Patches >=v0.18.0 ### References Reporting by @younaman(Nanzi Yang)