Skip to content
OpenAdvisories
High · 8.0 CVE-2023-22645 EUVD-2023-26779

kubewarden: Excessive permissions for kubewarden-controller-manager-cluster-role

Published Apr 19, 2023 · Updated Feb 5, 2025 · Assigned by suse

Description

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0.

Affected products

VendorProductAffectedFixed
SUSE kubewarden kubewarden-controller – < 1.6.0 1.6.0

References