Description
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Critical · 9.8
CVE-2024-36540
EUVD-2024-36152GHSA-h9mr-jrr6-mjrf
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service…
Published Jul 24, 2024 · Updated Mar 13, 2025 · Assigned by mitre