Skip to content
OpenAdvisories
Low · 2.9 CVE-2020-8029 EUVD-2020-28941GHSA-3hfm-p6g2-9fv7

skuba: Insecure handling of private key

Published Feb 11, 2021 · Updated Sep 16, 2024 · Assigned by suse

Description

A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.

Affected products

VendorProductAffectedFixed
SUSE SUSE CaaS Platform 4.5 skuba – < https://github.com/SUSE/skuba/pull/1416 https://github.com/SUSE/skuba/pull/1416

References