Unrated severityNVD Advisory· Published Jul 24, 2024· Updated Aug 2, 2024

CVE-2024-36537

Description

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected products

Cert Manager/Cert Managercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =v1.14.4
osv-coords
pkg:bitnami/cert-manager
Range: >= 1.14.4, < 1.14.5

Patches

Vulnerability mechanics

References

gist.github.com/HouqiyuA/27879a6366a65fcd5f6c6fcbcf68d8e3mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000