Описание
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
5.9 Medium
CVSS3
8.1 High
CVSS3
Дефекты
Связанные уязвимости
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, ...
Grafana: Users can generate Service Account tokens after permissions removal
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с ошибочным доступом к учетной записи по истечении срока действия токена, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
5.9 Medium
CVSS3
8.1 High
CVSS3