CVE-2024-39690
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Résumé
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gaining control of that namespace. Version 0.7.1 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com