Описание
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| grafana | removed | package |
EPSS
Связанные уязвимости
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
Grafana: Users can generate Service Account tokens after permissions removal
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с ошибочным доступом к учетной записи по истечении срока действия токена, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS