Skip to content
OpenAdvisories

Package · Go

github.com/kubean-io/kubean

1 known vulnerabilities.

1 result · Feed

  • Medium 6.0

    Cluster-level privilege escalation in kubean

    Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has `*` verbs of `*` resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive …