Skip to content
OpenAdvisories

Package · Go

github.com/rhobs/observability-operator

1 known vulnerabilities.

1 result · Feed

  • High 8.8

    Observability-operator: observability operator privilege escalation

    A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with *ClusterRole* upon deployment of the *Namespace-Scoped* Custom Resource MonitorStack. This issue allows an adversarial Kubernetes Account with only namespaced-level rol…