CVE-2024-32359

CVSS 6.9 MEDIUMEPSS 0.2%CWE-285

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.9EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

02 may 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code through designed commands to obtain the secrets of the entire cluster and further take over the cluster.

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H

Productos afectados

n/a · n/a

Referencias

http://carina.com https://gist.github.com/HouqiyuA/568d9857dab4ddba6b8b6a791e90f906 https://github.com/carina-io/carina https://github.com/HouqiyuA/k8s-rbac-poc