CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Original description
The description as published by the source.
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Affected packages
Bitnami
contour
[{"type":"SEMVER","events":[{"introduced":"1.28.3"},{"fixed":"1.28.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web gist.github.com