Описание
NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.3.0 (исключая)
cpe:2.3:a:nvidia:aistore:*:*:*:*:*:kubernetes:*:*
EPSS
Процентиль: 11%
0.00037
Низкий
5 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-266
Связанные уязвимости
CVSS3: 5
github
8 месяцев назад
NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure.
EPSS
Процентиль: 11%
0.00037
Низкий
5 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-266