CVE-2022-31677
An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor cou…
Published: 2022-08-29 · CVSS: Unscored
An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7