Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-64w6-7xrg-vmhg

Опубликовано: 12 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account.

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account.

EPSS

Процентиль: 24%
0.0008
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 6.6
redhat
больше 1 года назад

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
nvd
больше 1 года назад

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

EPSS

Процентиль: 24%
0.0008
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-285