CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's toke...

Original description

The description as published by the source.

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami cert-manager

[{"type":"SEMVER","events":[{"introduced":"1.14.4"},{"fixed":"1.14.5"}]}]

References

advisory gist.github.com
web nvd.nist.gov