NetSight
critical9.8

CVE-2024-36539

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Impact

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected products

VendorProductAffected versions
ProjectcontourContour
Version 1.28.3

Weakness classification

References