Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-22645

kubewarden: Excessive permissions for kubewarden-controller-manager-cluster-role

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE kubewarden

  • kubewarden-controller to < 1.6.0affected

References