Threats tagged 'ghsa-j8j4-rw65-56r6'

Telepresence's Traffic Manager gRPC API on port 8081 lacks authentication, allowing any pod with network access to register as a client in any managed namespace. This enables the pod to intercept services in namespaces without Kubernetes RBAC permissions, exfiltrating the victim pod's full container environment including secrets and tokens. The vulnerability affects versions prior to 2.31.0 and is fixed in version 2.31.0.