Skip to content
OpenAdvisories

Archive

3 July 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-2728 Public exploit

    Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin

    Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the…