Skip to content
OpenAdvisories

Product · VMware

Pinniped

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.8

    Privilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can edit LDAP Group DN entries

    A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in the clusters, only if all the following conditions were true: the Pinniped Supervisor server is running with an ActiveDirectoryIdentityProv…