CVE-2024-36536

Impact

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://gist.github.com/HouqiyuA/381f100f2ba82a8ada03994aac5bb2e8
• https://github.com/advisories/GHSA-c9cm-5j82-m6pj
• https://nvd.nist.gov/vuln/detail/CVE-2024-36536
• https://pkg.go.dev/vuln/GO-2024-3027