high8.8
CVE-2024-36538
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Impact
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chaos-Mesh | Chaos Mesh | Version 2.6.3 |