PT-2025-12431
CVE-2024-53349
·
Published
2025-03-21
·
Updated
2025-03-22
Description by
CVSS 3.1
7.4
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
kuadrant version 0.11.3
Description
The issue is related to insecure permissions, allowing attackers to gain access to the service account's token. This can lead to escalation of privileges via the secrets component in the k8s cluster.
Recommendations
For kuadrant version 0.11.3, update to a version that fixes the insecure permissions issue to prevent attackers from gaining access to the service account's token.
Found an issue in the description? Have something to add? Feel free to write us 👾