Threats tagged 'ghsa-97xr-6xrj-3f39'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.4%	CVE-2026-93017The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API High7.7EPSS 0.4%2026-10-08GCVE DatabaseCVE-2026-93017 The insights-operator-gather ClusterRole in OpenShift grants the operator's service account unrestricted read access to all secrets across every namespace in the cluster. This broad permission allows any pod running with this service account to access sensitive secret data cluster-wide. The vulnerability has a CVSS score of 7.7, indicating high severity. A security update is available in OpenShift Container Platform 4.14.76 to address this issue. EPSS 0.4%Report on CVE-2026-93017 Vulnerability CWE-269 #ghsa-97xr-6xrj-3f39	GCVE Database	2026-10-08

Page 1 of 1