CVE-2023-48312
- EPSS 0.07%
- Veröffentlicht 24.11.2023 18:15:07
- Zuletzt bearbeitet 21.11.2024 08:31:28
capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the cluster...
CVE-2023-46254
- EPSS 0.23%
- Veröffentlicht 06.11.2023 19:15:09
- Zuletzt bearbeitet 21.11.2024 08:28:10
capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind...
CVE-2022-23652
- EPSS 0.39%
- Veröffentlicht 22.02.2022 20:15:07
- Zuletzt bearbeitet 21.11.2024 06:49:01
capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0.2.1 an attacker with a proper authentication mechanism may use a malicious `Connection` header to start a privilege escalation at...