High severity8.8NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026
CVE-2024-36541
CVE-2024-36541
Description
Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: =4.6.0
- cpe:2.3:a:kube-logging:logging-operator:4.6.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- gist.github.com/HouqiyuA/f972d1c152f3b8127af01206f7c2af0dnvdThird Party Advisory
News mentions
0No linked articles in our index yet.