PT-2025-12434 · Kubeslice · Kubeslice
CVE-2024-53350
·
Published
2025-03-21
·
Updated
2025-03-22
CVSS v3.1
7.4
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
kubeslice version 1.3.1
Description
The issue is related to insecure permissions in kubeslice, allowing attackers to gain access to the service account's token. This can lead to escalation of privileges.
Recommendations
For kubeslice version 1.3.1, consider restricting access to the service account's token until a patch is available. As a temporary workaround, review and adjust the permissions to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kubeslice