Threats tagged 'ghsa-gf93-xccm-5g6j'

A cross-namespace secret access vulnerability exists in the DiscoveryServiceCertificate resource of the marin3r operator before version 0.13.4. This flaw allows users with permission to create DiscoveryServiceCertificate resources in one namespace to bypass Kubernetes RBAC controls and read Secrets from other namespaces. The issue is fixed in version 0.13.4 and later. Until patched, it is recommended to restrict DiscoveryServiceCertificate creation permissions to cluster administrators only.