CVE-2024-36540

9.8CRITICAL

Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

公開日: 7/24/2024更新日: 6/27/2025
NVDで表示MITREで表示

説明

Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

AI分析AIによる分析

影響を受ける製品

external-secretsexternal_secrets_operator
0.9.16

参照