Логотип exploitDog
bind:CVE-2024-6840
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-6840

Количество 3

Количество 3

redhat логотип

CVE-2024-6840

больше 1 года назад

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
EPSS: Низкий
nvd логотип

CVE-2024-6840

больше 1 года назад

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
EPSS: Низкий
github логотип

GHSA-64w6-7xrg-vmhg

больше 1 года назад

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2024-6840

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-6840

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
0%
Низкий
больше 1 года назад
github логотип
GHSA-64w6-7xrg-vmhg

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CVSS3: 6.6
0%
Низкий
больше 1 года назад

Уязвимостей на страницу