CVE-2024-5042 — Submariner-operator: rbac permissions can allow for the spread of node compromises
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allo…
Published: 2024-05-17 · CVSS: 6.6 · CVSS 3.1
A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7